The README explains installation and requirements, and the package has a clear MIT declaration with no install-time scripts. Its small, inactive project footprint leaves little evidence of ongoing maintenance or security oversight.
32%
Total Score
69
75
The latest release was published in February 2016, with no releases in the last 12 months and only two releases overall. More than 10 years without a release is strong evidence of abandonment risk.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide no meaningful community signal to offset the stale release history.
Composer is used as the build tool, which is appropriate for a PHP package, but no security-scanning tooling is present. This is a modest hygiene gap rather than a severe risk.
The repository is not formally archived, but it was last pushed in February 2016. This does not equal archival status, yet it reinforces the long period without observable maintenance.
The repository has no security policy. For a web application framework, this is a transparency gap because users have no documented channel or process for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
questwork/dbo Version dev-master | — | — |
questwork/orm Version dev-master | — | — |
questwork/core Version dev-master | — | — |
questwork/logger Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.