The README is clear, the repository matches the package, and installation has no lifecycle scripts. A security policy is absent, leaving limited guidance if problems arise.
55%
Total Score
50
100
83
83
The package and repository are owned by the same individual account rather than an organization. This indicates a thin backing structure, though observed activity is more important than registry ownership records.
The package has 58 releases and a stable release history, but there have been no releases in about two years and eight months. That is a meaningful maintenance concern despite the mature release count.
There were no commits or active maintainers in the last three months, consistent with the repository having been last pushed over two years ago. This raises abandonment risk.
There were no new or closed issues or pull requests in the last month, with one issue still open. This provides no evidence of active maintenance and reinforces the release and commit concerns.
The repository has no stars, one watcher, and three forks. This is limited supporting evidence of adoption, but popularity alone does not determine health.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.13 | — | — |
floor12/yii2-editmodal Version * | — | — |
floor12/yii2-module-files Version * | — | — |
kartik-v/yii2-widget-select2 Version @dev | — | — |
kartik-v/yii2-widget-datepicker Version @dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.