doctrine/cache

Risky to adopt: the package is explicitly deprecated and has had no registry release for over four years. The repository remains maintained enough to be unarchived and the release is licensed and documented, but the project directs users to newer PSR-6 or PSR-16 alternatives.

Latest 2.2.0

Packagist

35%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk because the README also says the Doctrine Project will no longer provide bug fixes.

Release history

The package has 43 releases over a long history, but its latest release was in May 2022 and there were no releases in the last 12 months. That extended release gap materially raises abandonment and compatibility risk.

Repo commit activity

There were no commits and no active maintainers in the three months measured. Although the repository was pushed in October 2025, the recent activity window still indicates limited ongoing development.

Repo tooling

The repository uses Composer and Phing for builds, but no security scanning tools were detected. This is a transparency and maintenance gap, though it is less important than the explicit package deprecation.

Security policy

No security policy was found in the repository. That weakens vulnerability-reporting transparency for a dependency, although it is not by itself evidence that the release is unsafe.