The README covers installation and usage, and the focused file tree keeps adoption simple. There is no security scanning, so maintenance confidence remains limited.
36%
Total Score
25
100
78
83
The latest of six releases was published in January 2017, and there have been no releases in roughly nine years. This is strong evidence of abandonment for a dependency that may need compatibility updates.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with its last push in January 2017. No provided signal shows compensating maintenance activity.
One registry publishing account is consistent with a small project, but there is no organization backing or observed contributor activity to offset the narrow maintainer base.
The repository has zero stars and one fork, providing little evidence of broad community review or ongoing adoption. Popularity is supporting evidence, so this reinforces rather than determines the abandonment concern.
Composer is used for builds, but no security-scanning tools are present. The build setup is appropriate, while the missing scanning is a modest hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.