The repository is small but has tests, a matching source tree, and no install-time scripts. Its declared LGPL license differs from the detected GPL text, so verify licensing before adoption.
58%
Total Score
67
50
75
75
The package declares 12 runtime dependencies, including several related project packages and UI components. This adds upgrade and compatibility surface for a small project.
A license file is present, but the manifest declares LGPL-3.0-or-later while the artifact license text was detected as GPL-3.0. This mismatch should be resolved before adoption.
The package has 41 releases since June 2022, but none in the last 12 months; the latest release was over a year ago, which raises maintenance concerns.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with no release in over a year, this is a meaningful abandonment risk.
There are 11 open issues but no issues or pull requests were opened or closed in the last month, suggesting limited current project activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kartik-v/yii2-editable Version ^1.8.0 | — | — |
pozitronik/yii2-traits Version ^1.0.0 | — | — |
pozitronik/yii2-helpers Version ^1.1.2 | — | — |
yiisoft/yii2-bootstrap4 Version ~2.0.10 | — | — |
pozitronik/yii2-relations Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.