The source tree is substantial, the release is stable, and the package is neither deprecated nor archived. Its release and commit activity stopped nearly two years ago, while the missing README leaves consumers with limited guidance.
52%
Total Score
50
75
The package contains no README, which is a transparency and consumer-guidance gap for a library. Missing tests and changelog files are normal for a published PHP artifact and do not add concern here.
The package has had no releases in the last 12 months, and its latest release was nearly two years ago. Fifteen releases in total show an established history, but the long pause raises abandonment risk.
There were no commits or active maintainers in the last three months, consistent with a project that may no longer be actively maintained.
There has been no recent issue or pull-request activity, with one pull request still open; this provides little evidence of ongoing maintenance.
Composer is used for the build, but no repository security scanning tool is present. This is a modest maintenance-hygiene gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.14 | — | — |
hesabro/helpers Version * | — | — |
guzzlehttp/guzzle Version * | — | — |
hesabro/error-log Version * | — | — |
hesabro/change-log Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.