The package is clearly tied to its organization-backed repository, includes tests, and is MIT-licensed. Its small user base and lack of security policy add modest maintenance risk; pin this version if adopting it.
62%
Total Score
67
100
78
75
The package has 197 releases over roughly 12.5 years, but none in the last 12 months and its latest release was about two years ago, indicating current abandonment risk.
The repository had zero commits and zero active maintainers in the last three months, reinforcing the evidence that maintenance has stalled.
There are no open issues and only one open pull request, with no issue or pull-request activity in the last month; this is consistent with a quiet project but does not show active maintenance.
The repository has only 2 stars and 10 forks, indicating limited adoption; popularity is supporting evidence rather than a decisive health measure.
The project uses Make and Composer, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
g4/factory Version 1.* | — | — |
g4/profiler Version >=1.11.0 | — | — |
g4/value-object Version >=3.6.0 | — | — |
g4/zf1-future-zend-db Version 1.23.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.