davidxu/yii2-admin
Its dependency list is short, installation runs no lifecycle scripts, and the source matches the package. However, activity has stopped since July 2024, and the package’s declared BSD-3-Clause license conflicts with the detected GPL-3.0 file; resolve that licensing issue before adoption.
54%
Total Score
50
100
75
75
Health Score Breakdown
A BSD-3-Clause license is declared in the manifest, but the artifact license file was detected as GPL-3.0. The release is licensed, but the mismatch creates a material adoption and compliance concern.
The package has 24 releases, but none in the last 12 months; the latest release was in July 2024, indicating a prolonged maintenance gap.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release for about two years.
The repository uses Composer build tooling, but no security-scanning tools were detected; this is a modest transparency and maintenance gap rather than evidence of unsafe code.
The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Misbahul Munir |
| David Xu |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ^2.0.7 | — | — |
davidxu/yii2-adminlte4 Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.