The package has a clear MIT license, a focused dependency set, and usable installation documentation. Its tiny codebase has no tests or security policy, leaving little evidence of ongoing quality control.
38%
Total Score
50
50
The latest release was about 8 years and 5 months ago, with no releases in the past 12 months. Four releases were published in a very short initial period, but there is no evidence of continued maintenance.
The repository is not archived, but it was last pushed about 8 years and 5 months ago. This substantially limits the value of its non-archived status as evidence of active maintenance.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these values provide no visible community signal to compensate for the long inactivity.
Composer is used for the build, but no security scanning tools are present. This is a modest supply-chain hygiene gap rather than a severe issue on its own.
The linked repository has no security policy. For a package that exposes a web controller, this is a transparency and maintenance gap, although it is not evidence of malicious behavior.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.