The README, declared BSD-2-Clause license, and absence of install-time scripts make the package straightforward to inspect and use. Its tiny repository has little community interest and no security policy or scanning, increasing the cost of future maintenance.
38%
Total Score
50
100
67
75
The package has had only two releases, with the latest on March 4, 2013 and none in more than 13 years. This is strong evidence of abandonment for a database library that may need compatibility and security maintenance.
The repository is owned by an individual user rather than an organization, so there is no organizational backing signal to offset the very old activity.
There are no open issues or pull requests and no recent activity, which may indicate stability but, alongside the old release history, also shows no visible maintenance engagement.
The repository has only 3 stars and 1 fork, providing little evidence of broad review or community support. Popularity is supporting evidence, but this reinforces the maintenance concern.
Composer is used for the build, but no security scanning tools are configured. That leaves an avoidable transparency and maintenance gap for a database-access library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.