The package has a clear source match, a declared BSD-3-Clause license, and a stable dependency profile. Its maintenance appears to have stopped, with no recent commits or releases and minimal project adoption; the absent security policy adds a smaller transparency concern.
42%
Total Score
25
78
75
The latest release was about eight years ago, and there have been no releases in the last 12 months. The three-release history shows the package was published, but not that it remains maintained.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating substantial abandonment risk.
The repository is owned by the matching individual account rather than an organization, so the small registry maintainer list is not compensated by visible organizational backing.
The repository has zero stars, one fork, and one watcher, providing little supporting evidence of community adoption. Popularity is supporting evidence rather than the main verdict.
Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tool is present. This is a minor hygiene limitation rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
yiimaker/yii2-email-templates Version ~4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.