The package is clearly licensed, documented, and recently released with matching source. Its small user base, single active contributor, and lack of security tooling leave more maintenance risk than a mature dependency.
68%
Total Score
50
100
81
75
One registry maintainer is consistent with the single-user project, but it leaves publishing dependent on one account.
The repository is owned by an individual account rather than an organization, so the single-contributor maintenance risk is not offset by visible organizational backing.
All recent commits came from one contributor, giving the project a complete single-person bus factor and increasing abandonment risk if that contributor stops maintaining it.
Only one commit was recorded in the last three months, indicating limited recent development activity despite the recent release.
The repository has one star, no forks, and one watcher, so there is little visible community adoption or external support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
denisok94/helper-composer Version >0.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.