The package includes tests, a changelog, a substantial README, and a small dependency footprint. Its source repository remains available, but maintenance activity has stopped and no new registry release has appeared since 2019.
58%
Total Score
50
100
81
83
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with a project that has largely gone dormant.
Only one registry publishing account is listed, which leaves a thin publishing base; the linked repository is user-owned, so this is a modest resilience concern rather than a severe warning.
The package has 18 releases, but none in the last 12 months; its latest release was over 6 years ago, which raises abandonment risk.
There is one open issue and one open pull request, but neither has seen activity in the last month, providing limited evidence of ongoing maintenance.
Composer build tooling is present, but no security scanning tools were detected; this is a minor transparency and hygiene gap alongside the stronger maintenance evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version >=2.0.14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.