The README and stable version make the small library understandable. Its declared MIT license and lack of install scripts reduce adoption friction, but the source offers little operational assurance.
48%
Total Score
50
79
75
The package has had no release in over a year: its latest release was June 3, 2025, despite 13 releases overall. This indicates a meaningful maintenance concern for a database library.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.
The linked repository name does not match the package name and its README does not mention the package, so the source-to-package relationship is less transparent than expected.
Composer is used for the build, which is appropriate, but no security scanning tooling is present. That leaves a modest assurance gap for a package handling database access.
The repository has no security policy, reducing transparency about how vulnerabilities in this database library should be reported and handled.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.