The small dependency set, repository tests, and release notes provide useful maintenance evidence. However, the package is abandoned and has had no release or commit activity for nearly five years, so new projects should use the listed replacement instead.
15%
Total Score
0
100
58
Packagist marks the entire package as abandoned and provides php-kitchen/yii2-di as a replacement. Package-wide deprecation is a severe adoption risk even though the repository is not archived.
The latest release was published in December 2021, with no releases in the last 12 months. Nearly five years without a release indicates substantial abandonment risk.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. This is strong evidence that maintenance has stopped.
The linked repository is named yii2-di and neither matches this package name nor mentions it in the README. That weakens provenance confidence and suggests the package may be a differently named sub-package or a mismatched repository.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version >=2.0.38 | — | — |
yidas/yii2-bower-asset Version 2.0.13.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.