It has a long release history, a stable major version, tests, a README, and a current release with notes. The small public footprint, absent security policy, and inactive recent commit history leave maintenance and transparency concerns.
68%
Total Score
50
100
88
75
The repository recorded 0 commits and 0 active maintainers during the last three months, which is a concrete sign of currently inactive development despite the recent release.
The repository has 0 stars and 0 forks and only 1 watcher; popularity is supporting evidence rather than a verdict, but this provides little evidence of a broad maintainer or user community.
Composer is used for builds, but no security-scanning tools were detected, leaving a modest transparency and assurance gap.
The repository has no security policy, reducing clarity about vulnerability reporting and response expectations.
The single workflow was fully analyzed and uses read-only permissions with no detected dangerous findings, but both of its 2 action references are unpinned, weakening build reproducibility and update safety.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-db Version ^2.20 | — | — |
laminas/laminas-servicemanager Version ^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.