The package has a clear README, MIT licensing, and no install-time scripts. Its tiny project footprint and lack of security tooling leave little evidence of ongoing support.
40%
Total Score
75
69
75
The latest release was published in June 2017, with no releases in the last 12 months; this is strong evidence of abandonment risk despite nine historical releases.
There are three open issues but no new or closed issues and no pull-request activity in the last month, providing no evidence of current maintenance.
The repository has only 9 stars and 4 forks, so there is limited visible community support; this is supporting evidence rather than a verdict by itself.
Composer is used for builds, but no security-scanning tools are configured; this is a meaningful transparency and maintenance gap for a package handling encrypted fields.
The repository is not archived, which keeps the project technically available, but its last push was also in June 2017 and does not offset the stale release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.