Clear licensing, release notes, and organizational ownership support adoption. The package is small and stable, but its long inactivity and lack of security scanning warrant pinning and monitoring.
67%
Total Score
67
88
100
The package has 12 releases since March 2017, but none in the last 12 months and its latest release was about two and a half years ago. This indicates materially reduced maintenance activity, though the security-only policy explains some of the slowdown.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing that ongoing development has stopped rather than merely slowed.
There was no new or closed issue or pull-request activity in the last month, with one issue still open. This is consistent with the stated security-only maintenance mode and adds a modest maintenance concern.
Composer build tooling is present, but no security-scanning tool was detected. That weakens maintenance transparency for an authentication-related package, although it is not evidence of a defect by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dotkernel/dot-controller Version ^3.4.0 | — | — |
dotkernel/dot-authentication Version ^2.3.0 | — | — |
laminas/laminas-servicemanager Version ^3.21.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.