The repository includes tests and documentation, and the package is licensed and not deprecated. Maintenance has gone quiet, with no commits in the last three months and no release for nearly two years; workflow references are also unpinned.
65%
Total Score
50
100
83
67
The package has 49 releases since 2017, but the latest release was nearly two years ago and there were no releases in the last 12 months, indicating a substantial maintenance pause.
There were no commits and no active maintainers in the last three months, which is consistent with the long release gap and raises abandonment risk.
There are no new or closed issues in the last month and one open pull request, showing limited current collaboration but not a severe backlog.
The repository has only 2 stars and 1 fork, providing little community support or independent adoption evidence; popularity is supporting evidence, so this is a modest concern.
The project uses Composer for builds, but no security-scanning tools were detected, leaving security-process coverage limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0.19 | — | — |
nesbot/carbon Version ^3 || ^2.24 || ^1.22 | — | — |
horat1us/yii2-validation-exception Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.