The package includes tests, release notes, and a clear MIT license. Its small runtime dependency set and organization-owned repository add useful context; security-policy coverage is limited.
78%
Total Score
83
100
94
50
All five recent commits came from one contributor, creating concentration risk. Organization ownership provides some handoff capacity, so this is a caution rather than a severe abandonment signal.
Composer is used as the build tool, but no security-scanning tool was detected. The missing scanner is a modest transparency and hygiene gap, not evidence of unsafe code by itself.
The repository has no SECURITY.md or other detected security policy. For a database layer, this leaves vulnerability reporting and response expectations less clear.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.