lovullo/dbal

Risky to adopt for new projects: the package has had no release or repository commit activity for about seven years. Its license, documentation, organization backing, and security policy are positive, but they do not offset the clear abandonment risk.

Latest v2.9.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has 65 releases and a long history, but its latest registry release was about seven years ago and it had no releases in the last 12 months. That makes ongoing maintenance a substantial concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last push and absent recent releases, this is strong evidence of abandonment risk.

Repo issue activity

There were no new or closed issues and no pull requests in the last month. This is consistent with an inactive project, although the missing open-issues count leaves part of the activity picture unknown.

Repo popularity

The repository has zero stars, forks, and watchers, providing no supporting evidence of an active user or contributor community. Popularity is not required for health, but this removes a possible compensating signal for the inactivity.

Repo tooling

Composer and Phing build tooling are present, but no security-scanning tools were detected. This is a modest transparency gap, not a severe risk by itself.