Clear documentation, repository tests, and a stable release with recent release notes support adoption. Commit and issue activity has been quiet for 3 months, while workflows use unpinned images and lack a security policy.
64%
Total Score
67
89
75
The project has 66 releases over roughly 13 years and one release in the last 12 months, with a historical median interval of about 40 days. The recent cadence is slower than its long-term pattern, so this is a maintenance caution.
The repository had zero commits and zero active maintainers in the last 3 months. Although a recent release exists, the absence of current development activity raises abandonment risk.
There are 32 open issues and 7 open pull requests, but no new or closed issues or pull requests in the last month. The backlog and lack of recent issue movement indicate limited current maintenance.
Composer is used for builds, but no security scanning tools are configured. This is a modest transparency and maintenance gap, not evidence of a security incident.
The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented.
| Title | Versions | Severity |
|---|---|---|
CVE-2021-43822 jackalope/jackalope-doctrine-dbal is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 1.7.4. | 0.0.0 - 1.7.4 | High |
| Dependency | Last Release | Score |
|---|---|---|
phpcr/phpcr Version ~2.1.5 | — | — |
doctrine/dbal Version ^3.8.1 || ^4.0 | — | — |
psr/simple-cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
phpcr/phpcr-utils Version ^1.8 || ^2.0 | — | — |
jackalope/jackalope Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.