Usable with caveats: the package is licensed, tested, documented, and not deprecated or archived. However, it has had no release since December 2023, no recent commits, and limited project activity, so future compatibility and maintenance are uncertain.
58%
Total Score
50
100
78
80
There were zero commits and zero active maintainers during the last three months, while the repository was last pushed nearly three years ago. This is the strongest concern because fixes and compatibility updates may not arrive.
Only one registry publishing account is listed, leaving little visible publishing redundancy. The repository's actual activity is also inactive, so there is no strong compensating evidence of a broader active maintainer base.
Only two releases exist, and the latest was published in December 2023 with no releases in the following nearly three years. This is a meaningful maintenance concern for a dependency tied to evolving PHP and Doctrine versions.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is not harmful by itself, but it offers no evidence of an active user or maintainer community.
The repository has only 3 stars, 0 forks, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it provides little external adoption or review signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^3.7.2 | — | — |
cakephp/chronos Version ^3.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.