The MIT license and focused two-dependency footprint make the package easy to inspect and integrate. Its tiny repository offers little consumer documentation or testing support, so maintenance would be largely your responsibility.
30%
Total Score
25
63
75
The package has made only one release, on July 21, 2019, with no releases in about seven years. This is strong evidence of abandonment for a dependency that may need ongoing compatibility fixes.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the unchanged release history and indicating no observed maintenance.
One registry account has publish access. Because the project is user-backed rather than organization-backed, this provides limited continuity evidence, though observed activity is more important than the access list itself.
The artifact has no README, tests, or changelog. Missing tests and changelog are normal in published artifacts, while the missing README is a minor consumer-documentation gap for a library.
The linked repository name does not match the package name, and no README package mention was available. A name mismatch can be normal for a subpackage, but here there is no provided evidence confirming that relationship.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
yiisoft/yii2-redis Version ~2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.