The package has had no registry releases since December 2015, and the repository has no recent commits or active maintainers. It is licensed, tested, documented, non-deprecated, and backed by an organization, which reduces but does not remove abandonment risk.
58%
Total Score
50
100
75
83
The latest release was in December 2015, with no releases in the last 12 months. This is strong evidence of a long-unupdated dependency, although the stable 1.0 release may require few changes.
The repository recorded zero commits and zero active maintainers in the last three months. This is direct evidence of inactive maintenance and increases the risk that compatibility or defects will not be addressed.
There is one open issue and no issues or pull requests were opened or closed in the last month. This supports the conclusion that the project is currently quiet.
Composer build tooling is present, but no security-scanning tools were detected. For this small older library that is a hygiene gap rather than a standalone dependency risk.
The repository is not archived and was last pushed in October 2021. That provides some evidence of continued availability, but it is still not recent enough to compensate for absent current activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/data-fixtures Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.