Its prerelease status, tiny project footprint, and missing security policy provide little confidence, although the release includes a license, tests, and no install-time scripts. The repository is not archived, but that does not offset the lack of recent activity.
18%
Total Score
50
100
56
75
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because future maintenance and compatibility cannot be relied on.
The package has had only two releases, both in 2014, and none in the last 12 months; its latest release is more than 12 years old. This strongly indicates abandonment rather than an actively maintained stable package.
Only one registry account has publishing access. That is not proof of poor maintenance, but alongside the old release history it indicates a limited publishing base and higher continuity risk.
The repository has 2 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these very small figures provide no meaningful community-maintenance buffer.
The repository is not formally archived, which avoids an additional hard abandonment signal. However, its last push was more than 11 years ago, so the non-archived status offers little practical compensation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ~2.2,>=2.2.3 | — | — |
symfony/symfony Version >=2.4 | — | — |
doctrine/doctrine-bundle Version ~1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.