The package includes tests, release notes, a clear MIT license, and no install-time scripts. Its maintenance has stopped since June 2020, with no recent releases or commits, and the repository has no security scanning or policy.
58%
Total Score
50
79
50
The latest release was over six years ago, with no releases in the past 12 months; the 12-release history shows the project was once active but is now dormant.
The repository recorded no commits and no active maintainers in the past three months, consistent with the long gap since the last release and raising abandonment risk.
Composer build tooling is present, but no security scanning tools were detected. For a PHP library, this is a modest transparency and maintenance gap rather than a severe risk.
The linked repository is not archived, although its last push was over six years ago; the active archive status does not offset the absence of recent work.
The repository has no security policy. This lowers disclosure transparency, though it is less significant than the clear license, tests, and release documentation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
qpdb/common Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.