A small, replaceable database layer for EchoFusion: a PDO connection, a query builder, named connections and an optional Doctrine DBAL adapter, all behind one contract.
68%
Total Score
caution
A brand-new package with no established maintenance history and unpinned CI actions remains a moderate dependency risk.
The package is only hours old and has three releases in that period, so there is not yet enough history to demonstrate a durable release pattern.
The repository records zero commits and zero active maintainers over the last three months. Because the package is only hours old, this mainly reflects limited history rather than proven collapse, but it leaves maintenance capacity unestablished.
Composer build tooling is present, but no security scanning tools were detected. For this small new package, that is a modest transparency gap rather than a severe risk.
The repository has no security policy. This is a hygiene gap for a database package, though the small codebase and repository tests provide some compensating transparency.
The single workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings. However, both action references are unpinned, so their versions are not reproducibly fixed.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
echo-fusion/contracts Version ^1.7 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.