The README provides basic integration examples, and the package has no install-time scripts. The package lacks licensing clarity, while its minimal source offers little evidence for future fixes.
38%
Total Score
0
75
75
Only two releases were published, both in January 2017, with no releases in roughly nine years. This is strong evidence of abandonment for a library that may need compatibility fixes.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.
No registry license is declared, and no license file was detected in either the package or repository. That creates a material legal and adoption concern.
The package is very small, with four files, but the repository matches the package and includes the README and source files. The minimal tree limits evidence of project maturity without being inherently defective.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but this provides no supporting evidence of community adoption or shared maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.5 | — | — |
yiisoft/yii2-bootstrap Version ~2.0.0 | — | — |
bower-asset/jqueryui-timepicker-addon Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.