Documentation is brief, and the project has no tests, license, or security policy. Its small user-owned repository has seen no release activity since April 2023, which limits confidence in ongoing maintenance.
52%
Total Score
50
58
50
No registry license declaration, license file, or repository license file was detected, leaving the terms for using and redistributing this dependency unclear.
The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational backing to offset the single-publisher and small-project concerns.
The package has four releases over roughly four years, but none in the last 12 months; the latest release was in April 2023, indicating stale maintenance.
The repository name matches the package, but its README does not mention the package name; this weakens confidence that the linked source and published package are clearly tied together.
The repository has zero stars and forks and only one watcher, providing little supporting evidence of broad review or community adoption.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
alan/yii2-crontab Version ^1.0 | — | — |
yiisoft/yii2-redis Version ^2.0 | — | — |
promphp/prometheus_client_php Version ^2.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.