conquer/momentjs
The artifact is small, clearly licensed, and includes installation and usage guidance. It lacks security tooling and policy, so pin this version and verify compatibility with your Yii2 and Moment.js versions.
53%
Total Score
50
79
83
Health Score Breakdown
The package has only two releases, with the latest published in February 2016 and no releases in the last 12 months. This indicates prolonged maintenance inactivity.
The repository recorded no commits or active maintainers in the last three months, and its last push was in January 2017. The stable package scope partly limits the impact, but maintenance capacity is not demonstrated.
The repository has only 2 stars and 2 forks, providing little supporting evidence of broad community review or ongoing adoption. Low popularity is not decisive for a small Yii2 widget.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though the package is a small asset wrapper.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andrey Borodulin |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version * | — | — |
bower-asset/moment Version >=2.9.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.