The repository has a clear package layout, tests, README, and organizational ownership. Missing security scanning and policy, along with no recent commit activity, add maintenance and transparency concerns.
55%
Total Score
75
100
75
75
Only two releases have been published, with none in the last 12 months and the latest nearly three years ago. This is a meaningful maintenance concern despite the repository being recently pushed.
There were no commits and no active maintainers in the last three months. This supports the concern that the package may not be actively maintained, even though the repository has a recent push recorded elsewhere.
There are no open issues or pull requests and no recent issue or pull request activity. This is consistent with a small project, so it is only a minor caution alongside the lack of recent commits.
The repository has zero stars and two forks. This offers little adoption evidence, but popularity is supporting context and does not outweigh the maintenance signals.
Composer build tooling is present, but no security scanning tools were detected. For a maintained library this is a transparency and hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hiraeth/app Version ^3.0 | — | — |
doctrine/orm Version ^3.0 | — | — |
hiraeth/dbal Version ^3.0 | — | — |
hiraeth/caching-imp Version ^3.0 | — | — |
doctrine/annotations Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.