The repository has seen no commits for more than eight years, with no recent releases and no active contributors. Its declared license, matching source repository, stable version, and small dependency set provide useful transparency, but maintenance risk remains high.
42%
Total Score
50
100
72
83
The package has had only two releases, with none in the last 12 months; its latest release was published more than eight years ago. This is strong evidence of abandonment risk, though the stable 1.0.1 version provides some maturity.
There were no commits and no active maintainers in the last three months. Combined with the old last push, this materially increases the risk that compatibility or security issues will go unattended.
The package includes a readable README, while the absence of tests and a changelog is normal for published artifacts and is not treated as a gap. The linked repository also reports no tests or changelog, limiting evidence of project maturity.
There were no new or merged pull requests and no issue activity in the last month; the open-issue count is unknown. This supports the conclusion of limited ongoing maintenance, although it is weaker evidence than the absent commits.
The repository has zero stars, forks, and watchers, providing no community adoption or backup-maintainer evidence. Popularity is only supporting evidence, but its absence adds to the thin-support picture.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
bower-asset/galleria Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.