Query builder and ORM layer, part of Vecode Caldera
60%
Total Score
caution
No releases in 12 months and no commits in 3 months point to slowing maintenance.
The package has 7 releases since December 2022, but none in the last 12 months; the latest release was in April 2025. This indicates a meaningful maintenance pause despite a previously regular cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. The linked organization and existing tests provide some backing, but there is no recent implementation activity.
There were no new or closed issues and no pull-request activity in the last month. With no recent commits either, this gives little evidence of an active support or repair process.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest assurance gap rather than evidence that the release is unsafe.
The repository has no security policy. That is a transparency and vulnerability-reporting gap, though it is moderated by the package's small scope and lack of install-time scripts.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vecode/caldera-database Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.