Its README, license, and release notes make the small extension straightforward to understand. Maintenance evidence is weak, so pinning this version carries meaningful abandonment risk.
43%
Total Score
50
88
50
Only two releases exist, with the latest published about 10 years ago and none in the last 12 months. This strongly suggests the package is no longer actively maintained.
The repository recorded no commits and no active maintainers in the last 3 months, while its last push was about 7 years ago. The long inactivity outweighs the fact that the repository is not archived.
There were no new or closed issues or pull requests in the last month, with outstanding issues still present. This supports the broader evidence of dormant maintenance.
The repository has no security policy or documented security contact. For a small extension this is a transparency gap, though it is less significant than the long maintenance pause.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version >=2.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.