Package Health

laminas/laminas-db

The stable release line, release notes, repository tests, and organization backing support continued maintenance. Recent commit inactivity and unpinned workflow images leave meaningful maintenance and build-reproducibility concerns.

Latest 2.22.0PackagistPackagist

67%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. This is a meaningful maintenance warning, although the recent release and organization backing provide some compensation.

Repo issue activitycaution

There were no new or closed issues in the last month and only one merged pull request, indicating limited recent issue throughput. Open pull requests show some activity but do not offset the quiet period fully.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Workflow auditcaution

All three workflows were analyzed without trigger or untrusted-checkout findings, but all four action uses are unpinned and the auditor found a high-confidence unpinned container image. This weakens build reproducibility and update safety.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
laminas/laminas-stdlib
Version ^3.7.1
—
—

Weekly Downloads

Info

Last Published
4 months ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform