Documentation, tests, and licensing are all in place, and recent work is visible. The small contributor base and absent security policy leave less evidence of long-term resilience.
68%
Total Score
67
81
67
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no demonstrated organizational maintenance buffer.
The package is only 39 days old with two releases, but those releases arrived about four days apart, showing initial publishing activity without enough history to establish maturity.
Two contributors are active, but one accounts for 14 of 18 recent commits, so maintenance is substantially concentrated even though a second contributor is present.
The repository has zero stars, forks, and watchers. This is supporting evidence only, but combined with the package's 39-day age it provides little independent maturity signal.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in automated project hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
coolms/rql Version ^1.0 | — | — |
doctrine/orm Version ^3.0 | — | — |
doctrine/dbal Version ^4.0 | — | — |
symfony/config Version ^8.0 | — | — |
symfony/http-kernel Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.