dg/dibi

Risky to adopt despite a real, well-documented project: the registry marks this package abandoned, and repository activity has recently stopped. The recent stable release and substantial source repository provide some reassurance, but they do not outweigh the package-level deprecation.

Latest v5.1.1

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no distinct replacement identified beyond the same package name. Package-level deprecation is a severe adoption concern even though the repository and latest release remain available.

Repo commit activity

There were zero commits and zero active maintainers during the last three months. Although a recent release and repository push show the project is not wholly dormant, current development activity appears paused.

Repo issue activity

The repository has open issues and pull requests, but none were opened, closed, or merged during the measured month. That lack of recent issue activity is a maintenance warning.

Repo tooling

The repository uses Composer for builds, but no security scanning tools were detected. The missing scanning is a transparency and maintenance gap, though it is not severe enough to outweigh the stronger deprecation signal by itself.

Security policy

The repository has no security policy. For a database abstraction library, this leaves vulnerability reporting and response expectations undocumented.