johnson/yii2-pattern-captcha
The MIT license, focused dependency set, and matching repository make the package easy to inspect. Its lack of a security policy adds uncertainty for a package with no recent maintenance evidence.
38%
Total Score
50
100
71
50
Health Score Breakdown
The package has only 2 releases, both from June 2019, and no releases in the last 12 months. This is strong evidence of abandonment risk despite the repository not being archived.
Only one registry account has publish access, and the project backing identifies an individual owner. This leaves limited visible publishing redundancy, though it is not evidence of inactivity by itself.
Composer is used as the build tool, but no security scanning tools are reported. This is a hygiene limitation rather than a severe supply-chain concern.
The repository has no security policy. That weakens vulnerability-reporting transparency, especially for an old package with little recent maintenance evidence.
Version v0.0.2 is not marked as a prerelease, but the very low version and only two total releases provide limited maturity evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Arockia Johnson SR |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ~2.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.