The repository was pushed in 2025, and the release includes notes, a README, and no install-time scripts. Its very small codebase and single dependency reduce complexity, but they do not resolve the adoption concerns.
45%
Total Score
50
100
80
75
The manifest declares a proprietary license, with no detected license text or license file. That leaves redistribution and usage terms materially unclear for a package presented as open source.
This package has only one release, published nearly four years ago, with no releases in the last 12 months. The repository was pushed in 2025, but that does not demonstrate continued registry release support.
The repository recorded zero commits and zero active maintainers in the last three months. Its non-archived status and 2025 push provide some evidence it still exists, but recent maintenance activity is currently absent.
The linked repository has no security policy. For a small package this is a transparency gap, although the limited five-file codebase reduces the scope of the concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laminas/laminas-db Version ^2.15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.