Documentation, tests, release notes, and licensing are in place, but they do not offset the lack of current maintenance. The small repository footprint and absent security policy add little support for long-term adoption.
35%
Total Score
0
63
50
The package has had no release in over 10 years; its five releases were concentrated early in the project's life, indicating prolonged release abandonment.
There were no commits or active maintainers in the last 3 months, and the repository was last pushed over 9 years ago. This strongly indicates that fixes and compatibility work are unlikely to arrive.
The repository is not formally archived, which is a small positive, but its last push was in March 2017 and the lack of recent commits is more informative than its unarchived status.
No security policy was found, leaving vulnerability reporting and response expectations undocumented. This is a secondary concern alongside the much stronger maintenance warning.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hiqdev/yii2-collection Version * | — | — |
jeremeamia/superclosure Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.