Yii 2 Advanced Project Template
38%
Total Score
unhealthy
Risky: no commits or releases since May 2016, indicating the project is effectively abandoned.
The package was first released about 10 years ago, but its latest release was also in May 2016 and it has had no releases in the last 12 months. That is strong evidence of abandonment risk.
There were zero commits and zero active maintainers during the last three months, consistent with roughly a decade without repository updates. This is a severe abandonment concern.
A post-install-cmd script runs during installation. Install-time behavior deserves some caution because it adds execution during dependency setup, although this signal alone does not show harmful behavior.
The package and repository are owned by the same individual account rather than an organization. This does not prove a problem, but it provides no organizational backing to offset the inactive project.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of a maintained user or contributor community.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version >=2.0.6 | — | — |
yiisoft/yii2-bootstrap Version * | — | — |
yiisoft/yii2-swiftmailer Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.