The package has clear source alignment, a useful README, and no install-time scripts. Its very small project footprint and absent recent activity make long-term support less certain.
64%
Total Score
63
50
83
83
Six runtime dependencies, including several related packages from the same publisher, increase coupling and the amount of upstream maintenance this release relies on.
Only one registry account can publish the package, leaving a thin publishing base. The linked repository is also user-owned, so there is no organization backing shown to offset that concentration.
The registry namespace and repository are aligned under the same individual owner, which supports provenance, but the user-owned project provides no visible organizational backing.
The package has 33 releases since April 2020 and a release as recent as March 2026, but only one release in the last 12 months suggests a slower current cadence.
There were zero commits and zero active maintainers in the last three months. Although the repository was pushed recently for the release, the short-term activity record points to limited ongoing maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0.0 | — | — |
mihaildev/yii2-elfinder Version *@dev | — | — |
andrewdanilov/yii2-helpers Version ~1.0.17 | — | — |
andrewdanilov/yii2-ckeditor Version ~1.0.1 | — | — |
andrewdanilov/yii2-input-images Version ~1.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.