A clear README, exact repository match, release notes, and GPL-3.0 licensing improve transparency. The small project has no tests or security policy, so future maintenance deserves caution.
62%
Total Score
50
100
88
75
The package has only two releases and none in the last five years, which raises maintenance and compatibility concerns. A repository push in July 2025 provides some evidence the project is not entirely abandoned.
There were no commits or active maintainers in the most recent three-month window. The more recent July 2025 push partly compensates, but current maintenance activity remains uncertain.
Composer is used as the build tool, but no security-scanning tooling is reported. For a small database migration plugin this is a hygiene gap rather than a severe adoption blocker.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
bcosca/fatfree-core Version ^3.6 | — | — |
html2text/html2text Version ^4.3.1 | — | — |
ikkez/f3-schema-builder Version ^2.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.