The package has tests, a matching repository, MIT licensing, and organization backing. Its tiny release history and absent recent activity leave maintenance and compatibility risks for a new dependency.
38%
Total Score
75
63
50
Only two releases exist, with none in the last 12 months; the latest release was over 9 years ago, which is strong evidence of stalled maintenance.
There are no open issues or pull requests and no activity in the last month; while not independently severe, this is consistent with the long maintenance gap.
The repository has zero stars and forks and one watcher, providing little supporting evidence of community adoption; popularity is secondary to the much stronger inactivity evidence.
Composer is used for builds, but no security scanning tool is present; this is a modest transparency gap rather than evidence that the package cannot be maintained.
The repository is not archived, which avoids an explicit abandonment marker, but it was last pushed over 9 years ago and therefore does not offset the stale release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version >=2.5,<2.7 | — | — |
xloit/xloit-exception Version ^0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.