The README is substantial, version 1.5.0 has release notes, and the dependency set is small. Apache-2.0 licensing and no install-time scripts reduce adoption friction; pin this version and verify it against your Yii 2 stack.
55%
Total Score
67
100
94
88
The package and repository are owned by the same individual account rather than an organization. This is consistent ownership, but it provides limited evidence of backup maintenance capacity.
The package has six releases since March 2016, but none in the last 12 months; version 1.5.0 was released in November 2019, indicating several years without a registry update.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in April 2021. This is the clearest abandonment concern.
The repository has no published security policy. That is a transparency gap for a package handling uploaded images and backend content actions, although it is not evidence of a security defect.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version >=2.0.5 <2.1.0 | — | — |
yiisoft/yii2-imagine Version ^2.0 | — | — |
bower-asset/contenttools Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.