Clear licensing, repository tests, release notes, and a matching source repository support adoption. Maintenance has effectively stopped for about six years, with no recent commits or releases and no security policy or scanning.
57%
Total Score
67
100
81
83
The package has nine releases over about twelve years, but none in the last six years; this materially raises abandonment risk despite its established history.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long-term maintenance concern.
There were no new or closed issues and no pull-request activity in the last month, consistent with a project that is no longer actively maintained.
Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.
The linked repository is not archived, but its last push was in February 2020; the non-archived status does not offset the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
bower-asset/selectize Version ~0.12.0 | — | — |
yiisoft/yii2-bootstrap4 Version ~2.0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.