The empty README and one-person publishing base leave limited guidance and continuity for a small library. No commits in the last three months also suggests slowing maintenance, despite a recent release and an unarchived repository.
58%
Total Score
50
69
50
Only one account has registry publishing access, leaving a thin publishing base. The repository is also owned by a user account, so no organizational backing is shown to compensate for that concentration.
A README is present but contains no text, which is a meaningful documentation gap for a library consumers must integrate. The absence of tests and a changelog is normal for published package artifacts and is not counted against it.
Six releases over about 962 days, with one release in the last 12 months, show that the package is not abandoned but has a slow recent cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of limited recent maintenance. The release history shows a release within the last 12 months, so this is slowing activity rather than clear abandonment.
One star and one fork provide little evidence of broad adoption or community support, although popularity is supporting evidence rather than a verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/database Version ~3.0.0 | — | — |
hyperf/validation Version ~3.0.0 | — | — |
hyperf/db-connection Version ~3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.