The dependency surface is small and installation runs no lifecycle scripts. Integration is less convenient without a README, and the package's maintenance and provenance cannot be verified from a source repository that could not be found.
38%
Total Score
100
70
75
The artifact contains only three files, including one provider implementation and its manifest. This is consistent with a small adapter, but without collected repository evidence it provides little transparency into broader maintenance or project documentation.
The artifact has no README, which makes a library described as a MongoDB service provider harder to integrate. The absence of tests and a changelog in the published artifact is normal packaging practice and is not a concern by itself.
This package has only one release, first and latest published in February 2019, with none in the last 12 months. That long period without a follow-up release creates a substantial abandonment risk.
The current version is v0.1.0 rather than a stable-major release, so the package shows limited maturity even though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/mongodb-odm Version ~2.0.0-beta1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.