PDO connection pool for PHP with read/write splitting, round-robin load balancing across replicas, and automatic health checks — supports MySQL, PostgreSQL, and SQLite; a building block of the open-source foundation that Jardis-generated DDD code runs on
65%
Total Score
caution
Usable with caveats: its release workflow has a high-confidence template-injection finding and all actions are unpinned.
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear for a database connectivity library.
The audit found one high-confidence template-injection issue in auto-release.yml, alongside seven of seven unpinned action references and a workflow with top-level write permissions. The workflows were fully analyzed, so this is a real release-process hygiene concern even without an untrusted checkout trigger.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jardissupport/dotenv Version ^1.0 | — | — |
jardissupport/contracts Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.