Tests, documentation, and clear licensing provide a solid baseline for a small library. Maintenance and security coverage are limited, so this old release carries meaningful compatibility risk.
42%
Total Score
0
67
50
The package has only two releases, with the latest published in October 2012 and none in the past 12 months. That long period without releases is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long-standing lack of releases. No provided activity signal compensates for this inactivity.
The repository name does not match the package name and its README does not mention the package, which makes package-to-source ownership less transparent. The dedicated repository path partly helps, but the missing mention remains a caution.
The repository has only 1 star, 0 forks, and 1 watcher, offering little evidence of broad adoption or community support. Popularity is supporting evidence rather than decisive on its own, so this is a caution.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This matters more for a database integration library that may sit in application infrastructure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version >=2.2.3,<2.4-dev | — | — |
dflydev/identity-generator Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.