The MIT license and lack of install scripts reduce immediate friction. However, the four-file project has no tests, no security policy, and no security scanning, while repository activity has stopped since 2019. Its single maintainer and negligible adoption evidence add further uncertainty.
39%
Total Score
50
57
75
The package has made no release in the last 12 months, and its latest release was about 7 years ago. This is strong evidence of abandonment for a library dependency.
Only one registry maintainer is listed. The repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy if that maintainer becomes unavailable.
A README is present, but it is only 66 characters and the package contains no tests. Missing tests are normal in the published artifact, while the very limited consumer documentation is a modest transparency gap.
There are no open issues or pull requests and no issue or pull-request activity in the last month. Combined with the long release gap, this supports a conclusion of inactive maintenance.
The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these counts provide no additional maturity or community signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0.0 | — | — |
yiisoft/yii2-bootstrap Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.