Embedding Metabase on your PHP application
58%
Total Score
caution
Usable with caveats: no releases or commits since 2021 make abandonment the main concern.
The package has had no registry release in nearly five years, with only three releases overall and none in the last 12 months. This is substantial evidence of stalled maintenance for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of recent releases and indicating no observed ongoing maintenance.
There are no open issues or pull requests and no recent issue or pull-request activity. While this may reflect a small stable project, it provides no evidence of an active support community.
The repository has only 3 stars, 0 forks, and 0 watchers, indicating limited external adoption and review. Popularity is supporting evidence, so this reinforces but does not determine the maintenance concern.
The repository uses Composer, but no security scanning tools were detected. That is a modest hygiene gap, especially for a package that handles embedding credentials and JWT-related functionality.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lcobucci/jwt Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.