The package includes a substantial README, repository tests, and a matching MIT license. It is not deprecated or archived, but single-user ownership and the absent security policy leave little evidence of ongoing support.
42%
Total Score
25
83
75
Only two releases exist, and the latest was published about three years ago; there have been no releases in the last 12 months. This is strong evidence of an unmaintained release line.
The repository recorded no commits and no active maintainers during the last three months, consistent with the package's roughly three-year release gap. The repository's non-archived status does not show active maintenance.
One registry maintainer account provides a thin publishing base. This is somewhat less concerning for a user-owned project, but it leaves limited visible redundancy if the maintainer stops responding.
The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported. This compounds the maintenance concern, although it is not evidence of a vulnerability by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/di Version 3.0.* | — | — |
doctrine/dbal Version ^3.0 | — | — |
hyperf/database Version ~3.0.0 | — | — |
hyperf/framework Version 3.0.* | — | — |
hyperf/filesystem Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.