A small MongoDB ODM
58%
Total Score
caution
Usable with caveats: no registry release since April 2019 points to a serious maintenance risk.
The package has had 17 releases, but none in the last 12 months; its latest release was in April 2019, over 7 years ago. This strongly lowers confidence in ongoing maintenance.
There were zero commits and zero active maintainers in the last three months. Combined with the old latest registry release, this is evidence of weak current maintenance.
The repository has only 5 stars and 1 fork, indicating a small user and contributor community. Popularity is supporting evidence, so this adds modest abandonment concern rather than deciding the verdict.
Composer is used for builds, but no security scanning tool was detected. This is a modest transparency and maintenance gap, not evidence of a defect by itself.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a genuine but secondary maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/cache Version ^1.6|^1.7|^1.8 | — | — |
mongodb/mongodb Version ^1.4 | — | — |
doctrine/annotations Version ^1.4|^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.