The MIT license and direct package-to-repository match make the source easier to evaluate. The project provides no tests or security policy, leaving little evidence of maintenance discipline.
40%
Total Score
0
63
50
The package has made no release in nearly 7 years: its latest release was November 30, 2019, with zero releases in the last 12 months. Its earlier three releases were fairly regular, but that does not offset the prolonged silence.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. This is strong evidence that ongoing fixes and compatibility work are unlikely.
The repository has 0 stars, 0 forks, and 1 watcher, providing little external adoption or community evidence to compensate for the lack of recent maintenance. Popularity is supporting evidence only, so this is a secondary concern.
The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap, though it is less significant than the inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sentry/sdk Version ^2.0 | — | — |
yiisoft/yii2 Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.