The package is small, focused, and has clear usage documentation and release notes. Its last release and repository activity were about four years ago, while the project has only one star and no security policy or scanning.
45%
Total Score
25
100
75
88
The latest release was published about four years ago, and there have been no releases in the last 12 months. Eight releases show some history, but the prolonged pause raises abandonment risk.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
The source repository is owned by an individual account rather than an organization. This does not prove a problem, but it provides less visible institutional backing for a project that is no longer active.
The repository has 1 star, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide little evidence of a broad user or contributor base.
Composer is used for the build, which fits the package, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.