JSON API implementation for the ORM of a Ride application
64%
Total Score
caution
Usable with caveats: releases and commits have stopped for over two years.
The package has 27 releases since May 2016, but none in the last 12 months; its latest release was over two years ago. This indicates stalled maintenance despite a previously regular cadence.
There were no commits and no active maintainers in the last three months, consistent with more than two years since the latest release. This is a meaningful maintenance and support risk.
Composer build tooling is present, but no security-scanning tool was detected. That is a modest transparency and hygiene gap for an otherwise small project.
The linked repository is not archived, although its last push was over two years ago; the active status is positive but does not offset the stale activity.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a minor concern rather than evidence of abandonment by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ride/app Version ^1.0.0 | — | — |
ride/web Version ^1.0.0 | — | — |
ride/wra Version ^1.0.0 | — | — |
ride/app-orm Version ^1.0.0 | — | — |
ride/lib-log Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.