It includes clear licensing and a README, and it adds no install-time scripts. The repository could not be found, so ongoing maintenance and provenance cannot be verified.
10%
Total Score
50
100
Packagist marks the entire package as abandoned, with no replacement provided. That is a severe adoption risk even though the release itself is not individually withdrawn.
The package has only four releases and none in the last 12 months; its latest release was over six years ago. This strongly indicates inactive maintenance.
Version 0.1.3 is not a prerelease, but it remains below 1.0, which signals limited maturity and adds risk alongside the stale release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.7 | — | — |
flood/component-sonar Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.