simple-as-fuck/orm

Usable with caveats: it has a clear license, tests, a documented repository, and a recent release, but maintenance activity is currently weak. The repository had no commits or active maintainers in the last three months, and its workflow lacks explicit token permissions and security scanning.

Latest 0.3.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The project has existed for about 5 years 9 months with six releases, but only one release in the last 12 months and a median interval of about 144 days indicate a small, slow-moving project.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. The recent release and March 1 repository push provide some compensation, but current development activity is still a meaningful maintenance concern.

Repo popularity

The repository has zero stars and forks and only one watcher, indicating little visible adoption. Popularity is supporting evidence rather than a verdict, so this modestly lowers confidence in long-term support rather than making the package unfit.

Repo tooling

The repository uses Composer build tooling, but it has no detected security-scanning tool. This is a transparency and prevention gap, though not severe on its own.

Security policy

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.