cathedral/db

The package is small, documented, MIT-licensed, and does not run install-time scripts. Organization backing, an aligned repository, and a changelog provide useful transparency, but the available maintenance evidence is limited.

Latest 0.2.1

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over four years, with only three releases overall and none in the last 12 months. This is a meaningful maintenance concern, although the repository was pushed more recently.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, so current development activity is not demonstrated. The repository is not archived and has a more recent push, which partially offsets the concern.

Repo tooling

The repository uses Composer for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policy

No security policy was found in the linked repository, leaving vulnerability-reporting expectations unclear. The package's clear repository alignment and documentation provide some compensating transparency.

Version stability

Version 0.2.1 is not a stable-major release, so compatibility expectations are less mature than for a 1.x package. It is not marked as a prerelease, which avoids an additional stability concern.