Recent releases, repository tests, and read-only workflow permissions support continued maintenance. A single active contributor, no package README, and unpinned actions leave adoption dependent on limited ownership and weaker build reproducibility.
68%
Total Score
83
100
81
50
The artifact has no README, which weakens consumer documentation for a library, but the repository contains tests and uses GitHub releases, partly compensating for the missing artifact documentation.
All 8 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving a thin operational base.
The repository name does not match the package name, and no README mention was found, so the linkage is less transparent and the package may be a subproject or poorly documented repository pairing.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap but not evidence of abandonment.
Version 0.5.7 is not a stable-major release, but it is not a prerelease and recent releases contain no prerelease versions, so the maturity concern is limited.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^4.0.0 | — | — |
lesname/value-object Version ^0.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.