The package has a release note for this version and a clear small source tree. Its license metadata conflicts with the BSD-3-Clause license file, and the project has not changed since February 2017, making maintenance unlikely.
35%
Total Score
71
75
The package has had no release in more than 9 years, with all four releases published in February 2017. This is strong evidence of abandonment for a dependency that may need ongoing compatibility fixes.
A license file is present, so licensing is not absent; however, the manifest declares MIT while the detected license file is BSD-3-Clause. That mismatch requires clarification before adoption.
The repository is not archived, but its last push was in February 2017, more than 9 years ago. The inactive repository does not compensate for the equally stale registry release history.
The repository has no security policy. For an inactive package this reduces transparency and gives maintainers no visible process for handling newly reported issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
yiisoft/yii2-bootstrap Version * | — | — |
yiisoft/yii2-swiftmailer Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.