Risky to adopt: the package has had no release or repository activity for about six years, with no active contributors and minimal community uptake. It is clearly licensed, documented, and backed by a matching organization repository, but those strengths do not offset the strong abandonment risk.
42%
Total Score
50
50
67
88
The last release was published about six years ago, and there were no releases in the last 12 months. Only four releases exist, so compatibility and maintenance coverage are limited.
The repository has recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and indicating no visible ongoing maintenance.
The package has five runtime dependencies, including the MongoDB extension, MongoDB library, and an APM agent. This is a focused dependency set, though each dependency adds compatibility surface for an unmaintained integration.
One registry publishing account is listed, which is a thin maintainer base. The organization-backed repository provides some continuity, so this is a concern rather than a severe risk on its own.
The repository has zero stars and zero forks, with only five watchers. Popularity is not decisive by itself, but this provides little evidence of active community adoption or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mongodb/mongodb Version ^1.6 | — | — |
zoilomora/elastic-apm-agent-php Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.