Video extension for media management module based on Yii 2.0 framework
78%
Total Score
healthy
Recent releases and active commits support it, but one maintainer carries 93% of recent commits and its only action reference is unpinned.
The repository is owned by an individual rather than an organization, so the concentrated contributor activity is not offset by visible organizational handoff capacity.
Two contributors were active in the last three months, but the top contributor made 93% of commits. This creates a meaningful continuity risk for an individually owned project.
The repository has no security policy. This reduces disclosure transparency, although active maintenance and Dependabot provide some compensating evidence.
The single workflow was fully analyzed with no dangerous audit findings or untrusted checkouts, but its only action reference is unpinned. The missing top-level permissions block is acceptable on its own; the unpinned action is a hygiene caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
davidhirtz/yii2-media Version ^3.12 | — | — |
james-heinrich/getid3 Version ^1.9 | — | — |
davidhirtz/yii2-skeleton Version ^3.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.