Disable bower-asset for Yii2
53%
Total Score
caution
Usable with caveats: no registry release since 2020 and no recent repository activity weaken maintenance confidence.
The latest release was about 6 years ago, with only two releases overall and none in the past 12 months. That is strong evidence of an unmaintained release line, though the package may be intentionally stable.
The repository recorded 0 commits and 0 active maintainers in the past 3 months, reinforcing the long release gap and weakening confidence that issues will be addressed.
There were no new or closed issues in the past month, and two pull requests remain open. This provides little evidence of active maintenance and suggests pending work may be unattended.
Composer is used for the build, which fits the package, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance concern.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a hygiene gap for a package developers may depend on.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0.35 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.