The small user base and absent security policy provide little evidence of ongoing support. Tests, a README, and an explicit ISC license are present, but the package appears difficult to justify for a new dependency.
38%
Total Score
0
79
75
The latest release was in July 2016, with no releases in the last 12 months. This long period without publishing activity is strong evidence that maintenance has stopped.
The repository recorded zero commits and zero active maintainers in the last 3 months, while its last push was in July 2016. This reinforces the abandonment concern.
The repository has 6 stars, 1 fork, and 2 watchers, indicating a very small user and contributor audience. Popularity is only supporting evidence, but it offers little compensating maintenance signal here.
The repository has no security policy or documented security-reporting process. For a package that integrates with an application's database, this reduces transparency and support confidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yalesov/utf8 Version 2.* | — | — |
yalesov/yaml Version 2.* | — | — |
sabre/vobject Version 2.0.* | — | — |
yalesov/zf2-doctrine Version 2.* | — | — |
yalesov/arg-validator Version 2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.