It ships the expected platform binaries under an MIT license and has no install-time scripts, but provides little consumer documentation. The single-user project has no security scanning or policy, leaving maintenance and review capacity thin.
42%
Total Score
25
100
69
75
The package has only two releases, with the latest published in December 2017 and none in the last 12 months. This is strong evidence of abandonment for a package distributing platform binaries.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since December 2017.
One registry maintainer is reasonable for a user-owned project, but it provides little redundancy when the repository also shows no recent activity.
The artifact has no README, while tests and a changelog are not expected in a package that mainly ships compiled platform binaries. The missing README is a minor consumer-documentation gap.
The repository has only 2 stars and no forks, offering little supporting evidence of broad review or an active user community. Popularity is supporting evidence, so this reinforces rather than determines the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.