The package has a clear MIT license, a matching repository, and a concise usage guide. Its small maintainer base and lack of security scanning leave less assurance for future fixes.
60%
Total Score
50
100
83
50
One registry maintainer is consistent with a user-owned project, but it provides limited visible publishing capacity when current repository activity is also absent.
The last release was over two years ago, with no releases in the preceding 12 months. The package has 15 releases across roughly nine years, showing an established but currently inactive project.
The repository recorded no commits and no active maintainers in the last three months. Together with the stale release history, this raises abandonment and future-fix concerns.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these figures provide little external evidence of adoption or review.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.1 | — | — |
mohorev/yii2-upload-behavior Version ^0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.