The published artifact is documented and tested, with clear licensing and no install-time behavior. Its development appears abandoned: the last release and repository push were over 8 years ago, with no recent commits or community activity.
42%
Total Score
25
71
75
The package has had no release in over 8 years; its four releases were concentrated in 2018, which strongly indicates abandonment risk.
There were no commits and no active maintainers in the last 3 months, consistent with the long gap since the last repository push.
There were no new or closed issues or pull requests in the last month, offering no evidence of current maintenance or community support.
One star, one fork, and one watcher indicate a very small user and contributor footprint, limiting supporting evidence for long-term maintenance.
The repository is not archived, which is a positive sign, but its last push was over 8 years ago and does not offset the inactivity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.5 | — | — |
lapaz/quick-brown-fox Version ^0.1.0 | — | — |
codeception/codeception Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.