Usable with caveats: the package is clearly licensed, documented, stable, and not deprecated, but it has had no release or commit activity since September 2023. Its single-maintainer, untested, low-adoption project also lacks a security policy, so prefer it only if its limited maintenance risk is acceptable.
58%
Total Score
33
50
69
83
The package is over three years old and has had no releases in the last 12 months, with all three releases concentrated on its first day. This is strong evidence of abandonment or at least very limited ongoing maintenance.
There were no commits and no active maintainers in the last three months, despite the repository being available. This is the clearest current indication that fixes and compatibility updates may not arrive.
Four runtime requirements, including two CoffeeCode components and the PDO extension, create a meaningful integration surface but are not excessive for a PHP validation component.
Only one registry account can publish the package, leaving little redundancy if that maintainer becomes unavailable. The matching personal repository provides some backing, but no broader maintainer base is shown.
The registry namespace and repository owner match a personal account, providing direct ownership continuity but no organization-level backing or visible redundancy.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
coffeecode/router Version ^2.0 | — | — |
coffeecode/datalayer Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.