Usable with caveats: it is a stable, licensed package with tests and a recent release, but maintenance is sparse. There have been only six releases since 2022 and no commits or active maintainers in the last three months, so verify that it still fits your Symfony and Doctrine versions.
62%
Total Score
67
50
83
88
Four runtime dependencies, including Doctrine ORM and related AOP packages, are a meaningful compatibility surface for a transaction bundle but not an excessive dependency burden for its stated purpose.
The repository is owned by an individual user rather than an organization, so the project has a limited visible backing structure; this matters more alongside the sparse recent activity.
The package has existed since September 2022 and reached a release in April 2026, but it has only six releases overall and one release in the last 12 months, indicating a slow maintenance cadence.
The repository had no commits and no active maintainers during the last three months. The recent release partly offsets this, but the absence of current development activity raises maintenance risk.
The repository has no stars or forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little external evidence of adoption or review.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
dmp/cg-lib Version ^0.1.1 | — | — |
doctrine/orm Version ^3.6 | — | — |
dmp/aop-bundle Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.