The package has a usable README, exact-version release notes, no install scripts, and a small dependency surface. Its licensing needs clarification because the BSD-3-Clause declaration differs from the MIT license detected in the artifact.
35%
Total Score
25
71
100
The latest release was published over 8 years ago, and there have been no releases in the last 12 months. Only three releases exist, indicating a dormant maintenance history.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the last push being over 8 years ago. No newer activity is provided to offset the abandonment risk.
The artifact includes a license file, so the release is licensed, but it declares BSD-3-Clause while the detected file text is MIT. That mismatch should be resolved before adoption.
The registry lists one maintainer account, which leaves little observable publishing redundancy for a dormant package. This is a concern for continuity, although registry access records do not prove who actively maintains the code.
The repository has 0 stars, 1 fork, and 1 watcher, offering little evidence of a broad user or contributor base. Popularity is supporting evidence rather than decisive on its own, but it reinforces the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.