antweb/yii2-core
Its MIT license, tests, and matching organization repository provide useful transparency. The dependency set is broad, while security scanning and a security policy are absent, adding maintenance risk.
38%
Total Score
50
50
72
75
Health Score Breakdown
The latest release was published in December 2020, with no releases in the last 12 months. Nearly six years without a release is strong evidence of abandonment risk.
There were no commits and no active maintainers in the last three months, consistent with a project that has had no meaningful development for years.
Fifteen runtime dependencies create a relatively broad maintenance and transitive-risk surface for a core library, with several framework and application-oriented integrations.
The repository has only 2 stars and 1 fork. Popularity is supporting evidence rather than a verdict, but these numbers provide little evidence of a broad support community.
Composer is used for builds, but no security scanning tooling is present, leaving a transparency and maintenance-hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hui Yang |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ~2.0.0 | — | — |
hashids/hashids Version 2.0 | — | — |
vlucas/phpdotenv Version ^2.0 | — | — |
yii2mod/collection Version * | — | — |
yiisoft/yii2-debug Version ~2.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.