The small codebase is documented and includes tests, with a clear package-to-repository match. Its single maintainer and lack of a security policy leave limited ongoing support visibility.
42%
Total Score
100
69
75
This is the package's only release, published over eight years ago, with no releases in the last 12 months; that strongly raises abandonment risk.
The repository has one star and no forks, providing little independent adoption or community support evidence. Popularity is only supporting evidence, so this modestly reinforces the maintenance concern.
The repository is not archived, but its last push was in April 2018, matching the stale release history and indicating inactive maintenance.
The repository has no security policy, reducing transparency about how vulnerabilities are reported and handled, especially for an unmaintained integration package.
The package remains at v0.0.1 rather than a stable major release, which limits maturity evidence; it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version 2.0.15.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.