Risky to adopt: this package has had only one release, in 2015, and its repository has not been updated since January 2016. It is not deprecated or archived and has a simple, licensed codebase, but the prolonged inactivity and missing README make ongoing support and integration uncertain.
42%
Total Score
83
100
67
90
The package has only one release, published about 11 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, even though a small stable package may not need frequent releases.
The published artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the missing README is a real consumer-transparency gap for a library.
There are no open issues or pull requests and no recent issue or pull request activity. While no backlog is positive, the complete lack of recent activity is consistent with an inactive project.
The repository has zero stars and forks and only two watchers, providing little community evidence or external support. Popularity is supporting evidence rather than decisive proof, so this is a caution rather than a severe risk.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tooling is present. The missing security tooling is a modest transparency gap for an old, inactive repository.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
deltaphp/deltadb Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.