The package includes a README, tests, a matching source repository, and no install-time scripts. Its license records disagree, and the repository has no security policy, leaving maintenance and transparency concerns beyond the stale codebase.
38%
Total Score
0
69
75
The latest of 8 releases was published in March 2019, with no releases in more than seven years. This is strong evidence that the package is no longer maintained, despite the package not being registry-deprecated.
The repository recorded 0 commits and 0 active maintainers during the last 3 months, consistent with the release history and providing no evidence of current maintenance capacity.
A license file is present and the repository also has one, so licensing is not absent. However, the manifest declares MIT while the artifact license file is detected as BSD-3-Clause, creating a material licensing ambiguity.
The repository has 0 stars and 0 forks, with 1 watcher. This provides little supporting evidence of adoption or community oversight, though popularity alone is not decisive.
Composer is used as a build tool, but no security-scanning tooling is reported. This is a modest hygiene gap rather than evidence that the release is unsafe to install.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.14 | — | — |
yiisoft/yii2-bootstrap Version ~2.0.0 | — | — |
dmitriikoziuk/yii2-shop Version ^0.3.0 | — | — |
dmitriikoziuk/yii2-pages Version ^0.2.0 | — | — |
yiisoft/yii2-swiftmailer Version ~2.0.0 || ~2.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.