Usable with caveats: it is a licensed, documented, stable package with a small dependency surface, but the last release and repository push were in May 2018 and there has been no recent commit activity. Its minimal adoption and lack of a security policy add maintenance risk for a database library.
52%
Total Score
0
100
69
50
The package has 19 releases and a history dating to 2015, but its latest release was in May 2018 with no releases in the last 12 months, indicating prolonged inactivity.
There were no commits and no active maintainers in the last three months, strongly indicating that maintenance has stopped or is dormant.
The repository has zero stars and forks and only one watcher, offering little community evidence to compensate for its long inactivity.
The repository uses Composer, which supports reproducible PHP package management, but it has no security scanning tooling; the absence is a modest transparency and maintenance concern.
The linked repository is not archived, which preserves the possibility of future maintenance, but its last push was in May 2018 and other activity signals show no recent work.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.