The package is very small and has little evidence of ongoing care or consumer documentation. Its MIT license, organization ownership, clean install behavior, and matching repository reduce some risk, but not the abandonment concern.
38%
Total Score
75
79
75
The package has no README, tests, or changelog; absent tests and changelog are normal for published artifacts, but missing consumer documentation matters for an SDK. A GitHub release exists, though it has no release-notes excerpt.
There has been only one release, on September 20, 2019, with no releases in the last seven years. This is strong evidence of an unmaintained dependency.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided signal shows current maintenance capacity.
The repository has zero stars and zero forks, with three watchers. Popularity is only supporting evidence, but these counts provide little evidence of community review or adoption.
The repository has no security policy or security-scanning tools, leaving vulnerability-reporting and monitoring practices unclear. This adds a smaller transparency concern alongside the maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version 2.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.