This is a long-established, stable, non-deprecated package with 44 releases since 2017, a matching and recently updated source repository, a declared BSD-2-Clause license, and a small runtime dependency footprint. However, maintenance appears intermittent: only one release occurred in the last 12 months and there were no commits or active maintainers in the last 3 months, while the very small repository has no tests, changelog, security policy, or security-scanning tooling. It is usable as a dependency, but its limited validation and thin recent activity warrant review of the code and an adoption plan that accounts for possible maintenance gaps.
68%
Total Score
63
100
78
80
The repository is very small at 18 files and contains source code plus structured hotfix documentation, which supports transparency but offers little visible test or release infrastructure.
A README is present and GitHub Releases are used, but the artifact and repository contain no tests or changelog; for a small library this is a genuine maintenance and validation gap.
The repository is owned by the user account ppadevs rather than an organization, so the small maintainer base provides limited evidence of institutional continuity.
The package has a substantial history of 44 releases over about 9 years, but only one release in the last 12 months indicates a substantial slowdown relative to its earlier median release interval of about 12 days.
There were zero commits and zero active maintainers in the last 3 months, a meaningful signal of thin or intermittent maintenance despite the recent push and release evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^2.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.