The package has a clear BSD-3-Clause license and a small, usable artifact. Its README still labels the extension in progress and leaves testing and missing features as TODOs. The repository could not be found, so maintenance and provenance cannot be verified.
38%
Total Score
50
Only two releases were published, both on March 30, 2016, and there have been no releases in over 10 years. This is strong evidence of abandonment for a package intended as an application dependency.
A README is present, which helps consumers, but it explicitly calls the extension a work in progress and leaves testing and missing functionality as TODOs. Those unresolved gaps reinforce the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
embed/embed Version 2.5.6 | — | — |
yiisoft/yii2 Version 2.0.4 | — | — |
yiisoft/yii2-bootstrap Version 2.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.