ride/app-orm

Release historycaution

The package has 32 releases over more than 12 years, but none in the last 12 months; its latest release was over two years ago. This is meaningful evidence of stalled maintenance, though the long release history shows prior maturity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the release pause and raising a real abandonment-risk concern. The repository is not archived, which limits the severity.

Repo popularitycaution

The repository has no stars or forks and only seven watchers, indicating a very small visible user base. Popularity is supporting evidence only, so this modestly limits external validation rather than determining the verdict.

Repo toolingcaution

Composer is used for the build, but no security scanning tool is present. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a maintenance and transparency gap, but not severe on its own.