Its MIT license, README, changelog, and matching source repository provide useful transparency. Very low adoption and no security policy add concern beyond the aging release history.
42%
Total Score
0
64
50
The package has had no release in over 6 years: its latest release was March 17, 2020, despite 15 releases overall. This is strong evidence of abandonment for a package intended to integrate with a framework.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's long release gap and indicating no current maintenance capacity.
The repository has only 3 stars, 1 fork, and 0 watchers. Popularity is supporting evidence rather than a verdict, but these low figures provide little evidence of an active user or reviewer community.
Composer build tooling is present, but no security-scanning tools were detected. The build setup is a small positive, while the missing scanning coverage leaves a modest hygiene concern.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is less serious than the clear maintenance inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
craftcms/cms Version ^3.0.0-RC1 | — | — |
yii2tech/crontab Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.