The package is clearly documented, licensed, and easy to identify in its matching source repository. Its release and commit activity stopped about four years ago, with no tests, security scanning, or recent project activity, making long-term maintenance a significant concern.
45%
Total Score
25
50
78
83
The package has had only 3 releases, all concentrated between March 30 and April 13, 2022, with no release in about four years. This is strong evidence of abandonment risk despite the short early release interval.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no observable ongoing maintenance.
The package declares 6 runtime dependencies, including Yii2, Bootstrap, JUI, and an image library. This is a meaningful integration surface for an unmaintained package, though the dependency count is not excessive by itself.
There were no new or merged pull requests and no new or closed issues in the last month. The absence of issue activity is weaker than the release and commit gaps, but it provides no evidence of active support.
The repository has 0 stars, forks, and watchers, so there is little visible community support to compensate for the inactive maintainer.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
yiisoft/yii2-jui Version * | — | — |
yiisoft/yii2-bootstrap Version * | — | — |
abeautifulsite/simpleimage Version 2.* | — | — |
kartik-v/yii2-widget-fileinput Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.