The Apache-2.0 license and minimal Yii2 dependency are clear, and the repository is not archived. Long-term maintenance evidence is too weak for a dependable library choice.
38%
Total Score
0
100
58
75
Only two releases were published, with the latest over seven years ago and none in the past 12 months. This indicates a largely abandoned release line despite the package not being deprecated.
The repository had zero commits and zero active maintainers in the past three months, consistent with the latest release having been published over seven years ago. No provided signal shows compensating maintenance activity.
The package has no README, tests, changelog, or release notes. The missing tests and changelog are normal for published artifacts, but the absent README reduces consumer transparency for a library.
The repository has zero stars, one fork, and one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no meaningful community signal to offset the maintenance gap.
The linked repository is not archived, which avoids an explicit abandonment status. However, its last push was over seven years ago, so this does not outweigh the inactive commit and release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.