The one-person project and absent security tooling provide little evidence of ongoing support. Its license and package identity are clear, but the very short README gives consumers limited integration guidance.
34%
Total Score
25
69
75
This package has had only one release, on June 18, 2015, with no releases in the last 12 months; over 11 years without a new release is strong abandonment evidence.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of current maintenance.
Only one registry publishing account is listed, and the project is user-owned rather than organization-backed; this leaves limited visible publishing capacity if that maintainer is unavailable.
A README is present, but it contains only 31 characters and gives little usage guidance. Missing tests and a changelog are normal for a published artifact and are not counted against it.
The repository has zero stars and forks and one watcher, providing no meaningful community adoption or backup-maintainer evidence. Popularity is supporting evidence, so this reinforces rather than determines the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
yiisoft/yii2-imagine Version * | — | — |
pendalf89/yii2-tinymce Version * | — | — |
kartik-v/yii2-widget-alert Version * | — | — |
2amigos/yii2-file-upload-widget Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.