This release appears usable and reasonably healthy: it is not deprecated or archived, has a stable v1.3.1 release, recent publishing activity, a matching and README-referenced repository, clear MIT licensing, substantial documentation and tests, and no install-time lifecycle scripts. The main concerns are that the project is young, repository activity is entirely concentrated in one contributor, popularity is very low, and the repository has no security policy or security-scanning tooling. Overall, it is a viable dependency for developers comfortable with the risks of a small, single-maintainer project, but it merits monitoring and should not be treated as a mature, independently resilient dependency.
78%
Total Score
60
100
89
90
Only one registry account has publish access. This is not evidence of inactivity by itself, but it leaves publishing continuity dependent on a single person.
The repository is owned by a personal User account rather than an organization, so there is no organizational backing to compensate for the single-contributor and single-publisher concentration.
One contributor made all 14 commits in the last 3 months, with a 100% commit share. This is a material continuity risk for a user-owned project because there is no demonstrated handoff capacity.
There are no open issues or pull requests and no issue or pull-request activity in the last month. With no reported backlog this is not inherently unhealthy, but it provides little evidence of community review or support.
The repository has only 4 stars, 0 forks, and 0 watchers. Popularity is supporting evidence rather than a verdict, but these very low figures provide little external validation or community resilience.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^4.3 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
phpmailer/phpmailer Version ^6.6 | — | — |
designbymalina/dbmframework Version ~6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.