It has an MIT license, repository tests, no install-time scripts, and a small runtime dependency surface. Those positives do not make it a sound long-term choice for a new dependency.
42%
Total Score
0
67
50
The artifact includes a README, and the repository has tests. However, the README explicitly says the library is deprecated and will no longer receive Doctrine bug fixes.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the project's stated end of support.
The project has 47 releases over roughly 14 years, but it has had no releases in the last 12 months, indicating a current maintenance gap.
Composer and Phing provide build tooling, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than a standalone severe risk.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a package that is no longer actively supported.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.