The package is clearly identified, documented, and licensed, with no install-time scripts or workflow findings. Its small user-owned project has no security scanning and only two registry maintainers, limiting confidence in ongoing support.
43%
Total Score
50
64
83
The latest release was on July 23, 2024, with no releases in the last 12 months despite the package being 828 days old. This is strong evidence of abandonment risk.
The artifact includes a README, changelog, and release notes for this version, providing useful consumer and release documentation. The README also explicitly warns that this version is no longer maintained, which materially offsets that documentation strength.
The repository is owned by an individual user rather than an organization, so the two-account registry maintainer list provides limited evidence of durable project backing.
There were no new issues or pull requests in the last month and no merged pull requests, providing no evidence of active maintenance. The null open-issue count is unknown rather than negative evidence.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no visible community signal to compensate for the stalled release activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version >=2.0.6 | — | — |
deesoft/yii2-angular Version ~1.3 | — | — |
deesoft/yii2-adminlte Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.