Its Apache license, focused dependency list, README, and matching repository make the package transparent to inspect. The tiny project footprint and lack of security policy leave little evidence of ongoing support.
35%
Total Score
50
100
79
83
The latest release was published in September 2017, and there have been no releases in roughly nine years. This is strong evidence of abandonment for a dependency release.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of current maintenance.
The repository has only 1 star and 2 forks, providing little community evidence or backup capacity. Low popularity is supporting caution rather than a verdict by itself.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This adds a maintenance concern but is less serious than the lack of recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.