Validates at least one (or more) attributes.
55%
Total Score
caution
Usable with caveats: no release in about eight years and no recent repository activity.
The repository is owned by an individual rather than an organization, so the single registry maintainer is consistent with the available project backing but leaves a thin ownership base.
The package has 14 releases, but its latest release was about eight years ago and there were no releases in the last 12 months. This is a substantial maintenance concern for a dependency.
There were no commits and no active maintainers in the last three months, consistent with a project that has seen little recent maintenance.
There were no new or closed issues or pull requests in the last month, while six issues and two pull requests remain open. This suggests limited current project activity.
Composer build tooling is present, but no security scanning tools were detected. For a small package this is a hygiene gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.