Yii2 Carbon Timestamps Behavior
61%
Total Score
50
100
83
75
Only one registry account has publish access. This is a modest continuity risk for a user-owned project, though registry access alone does not establish actual project activity.
The registry namespace and repository are owned by the same individual account, showing consistent ownership but no organizational backing or redundancy.
The package has seven releases since March 2019, but none in the last 12 months and the latest release was about 22 months ago, indicating limited recent maintenance.
There were no commits and no active maintainers in the last three months, which is a concrete sign that maintenance has currently gone quiet.
There are no open issues and one open pull request, with no recent issue or pull-request closures; this gives limited evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0.47 | — | — |
nesbot/carbon Version ^2.0 | ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.