It includes tests, a matching organization-owned repository, and a clear Apache-2.0 license. The package has only one release and no observed commits in three months, so its maintenance record is not yet established. No install-time scripts reduce execution risk.
58%
Total Score
75
100
83
83
This is the package's first and only release, published today, so there is no release history demonstrating sustained maintenance or maturity.
The repository records zero commits and zero active maintainers over the last three months; because the package is only one day old, this is concerning but not evidence of long-term abandonment.
The repository has zero stars, forks, and watchers. This provides no supporting evidence of adoption, although a newly published package would not be expected to have an established audience.
The repository has no security policy, which reduces vulnerability-reporting transparency, though this is a hygiene gap rather than a severe dependency risk by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version 3.7.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.