Clear documentation, licensing, and an organization-backed repository make this release straightforward to inspect. Inactive recent development and the workflow’s floating container image warrant caution for long-lived production use.
68%
Total Score
75
100
88
83
The package has existed since April 2016 and has 12 releases, but it has made no release in the last 12 months; the latest release was in February 2025. The long gap lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the long release gap, this is meaningful evidence of currently inactive development.
There are only two open issues, no open pull requests, and no issue or pull-request activity in the last month. This is limited evidence of current project engagement, but not by itself severe.
Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency gap, not evidence that the package is unsafe.
The repository has no security policy. For a database adapter, this leaves vulnerability-reporting expectations unclear and modestly reduces maintenance transparency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.