Clear README, changelog, license, and release notes make integration and provenance easier. The small dependency set and lack of install scripts reduce routine adoption risk.
44%
Total Score
33
100
69
88
The package has made no releases in nearly nine years, despite seven releases during its first year; this strongly indicates abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the repository's long period without releases and materially increasing abandonment risk.
The repository is owned by a user account rather than an organization, so the single registry maintainer provides limited visible backing for continued maintenance.
Nine issues remain open, with no new or closed issues and no pull-request activity in the last month; this suggests unresolved maintenance demand.
Composer is used for builds, but no security scanning tools are present, leaving a modest repository hygiene gap that matters more for a stale project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0 | — | — |
guzzlehttp/guzzle Version 6.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.