The stable version and straightforward Composer dependency set make integration clear. Its license records conflict, and the repository has no security policy or scanning, adding transparency concerns. Pin this version only if its old Doctrine integration is still required.
32%
Total Score
0
69
67
The package has had no release in more than 10 years: its latest release was May 5, 2016, with no releases in the last 12 months. This is strong evidence of abandonment for a library dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and providing no evidence of current maintenance.
The artifact declares BSD-3-Clause and includes a license file, but the detected file text is MIT, creating a material license inconsistency that should be resolved before adoption.
The package contains only six files, including one source file and no visible test suite or release infrastructure. The small footprint may fit this narrow utility, but it limits transparency and maintenance evidence.
The repository has 0 stars, forks, and watchers, so there is no visible community support to compensate for the lack of current maintainer activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ~2.4 | — | — |
doctrine/common Version ~2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.