The package is small and clearly documented, with a matching source tree, an explicit BSD-3-Clause license, and release notes for this version. Maintenance is the main concern: only two releases exist, the latest was about 2 years and 8 months ago, and there were no commits or active maintainers in the last 3 months. The single-maintainer project also has no tests or security policy.
58%
Total Score
38
100
88
83
The repository recorded 0 commits and 0 active maintainers during the last 3 months. Combined with the old latest release, this is the strongest evidence of stalled maintenance.
Only one registry account has publish access. This creates a limited publishing base, although the linked repository is owned by the same individual, so the finding is a moderate resilience concern rather than evidence of abandonment by itself.
The repository owner is an individual user rather than an organization, matching the single-person publishing model. This provides clear ownership but limited organizational continuity.
The package has only 2 releases across nearly 12 years, with no releases in the last 12 months and the latest release about 2 years and 8 months ago. This indicates weak release momentum and raises maintenance risk.
There are 8 open issues and no pull requests, with no new or closed issues or pull requests in the last month. This suggests limited ongoing project interaction.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
yiisoft/yii2-imagine Version * | — | — |
mohorev/yii2-upload-behavior Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.