Package Health

jackalope/jackalope-doctrine-dbal

Clear documentation, repository tests, and a stable release with recent release notes support adoption. Commit and issue activity has been quiet for 3 months, while workflows use unpinned images and lack a security policy.

Latest 2.0.3PackagistPackagist

64%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Are you affected? Scan for Free

Health Score Breakdown

Release historycaution

The project has 66 releases over roughly 13 years and one release in the last 12 months, with a historical median interval of about 40 days. The recent cadence is slower than its long-term pattern, so this is a maintenance caution.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months. Although a recent release exists, the absence of current development activity raises abandonment risk.

Repo issue activitycaution

There are 32 open issues and 7 open pull requests, but no new or closed issues or pull requests in the last month. The backlog and lack of recent issue movement indicate limited current maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. This is a modest transparency and maintenance gap, not evidence of a security incident.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented.

Vulnerabilities

TitleVersionsSeverity
CVE-2021-43822
jackalope/jackalope-doctrine-dbal is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 1.7.4.
0.0.0 - 1.7.4
High

Package versions

Maintainers

Jackalope Community

Direct Dependencies

DependencyLast ReleaseScore
phpcr/phpcr
Version ~2.1.5
doctrine/dbal
Version ^3.8.1 || ^4.0
psr/simple-cache
Version ^1.0 || ^2.0 || ^3.0
phpcr/phpcr-utils
Version ^1.8 || ^2.0
jackalope/jackalope
Version ^2.0.0

Weekly Downloads

Info

Last Published
9 months ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform