A bundle that provides connectivity to MongoDB
28%
Total Score
unhealthy
Risky: one release in nine years and an early v0.1.0 version point to an effectively abandoned package.
This package has only one release, published about nine years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk despite the package not being marked deprecated.
The package declares five runtime dependencies, including its framework and database clients, creating a meaningful maintenance surface for an old, single-release bundle. No provided signal shows that this dependency burden is actively maintained.
The latest version is v0.1.0 and is not a stable major release, which limits maturity evidence. The fact that it is not technically marked prerelease does not compensate for the lack of subsequent releases.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/common Version ^2.6 | — | — |
mongodb/mongodb Version ^1.0 | — | — |
symfony/symfony Version ~2.8|~3.0 | — | — |
fzaninotto/faker Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.