The package has minimal project support, with no tests, security policy, or license, and only six files. Its documentation is useful and the repository is not archived, but the long period without releases or commits makes future maintenance unlikely.
35%
Total Score
33
56
67
The package has had only two releases, with none in the last 12 months; its latest release was in May 2016, indicating prolonged abandonment risk.
There have been zero commits and zero active maintainers in the last three months, consistent with a project that has not been maintained for years.
No license is declared, detected, or included in the package or repository, leaving the legal terms for using this dependency unclear.
The artifact and repository each contain only six files, limited to the README, Composer metadata, and a few application classes, suggesting very little project depth.
The package includes a substantial README, and the repository uses GitHub releases, but it has no tests or changelog; the missing tests are a modest maturity gap for an ORM library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.