The MIT license, README, and absence of install scripts are positives. Only one maintainer is listed, and the repository could not be found, so maintenance and provenance cannot be checked.
35%
Total Score
50
50
70
100
The package has had no release in over five years; its seven releases were concentrated in its first few weeks, which is strong evidence of abandonment.
Five runtime dependencies are required for this very small ORM, increasing the maintenance surface, although the dependency list is explicit.
Only one registry account has publish access, leaving little visible publishing capacity and increasing the impact of that maintainer becoming inactive.
Version 0.0.7 is not a stable major release, so its API may still change and the long period without updates provides no evidence of continued stabilization.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
charm/db Version >=0 | — | — |
charm/error Version >=0 | — | — |
charm/hooks Version >=0 | — | — |
charm/table Version >=0 | — | — |
godruoyi/php-snowflake Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.