Usable with caveats: the repository is active in status, matches the package, and the release is stable, but there have been no releases or commits for about 15 months. The missing license and very small project footprint add adoption risk.
58%
Total Score
50
100
78
90
Neither a license declaration nor a license file was found in the package or repository. This creates a concrete legal and transparency concern for dependents.
The registry namespace and repository owner match, and the project is user-owned rather than organization-backed. This is consistent ownership evidence; the single-person backing offers less resilience than a larger maintained project but does not independently establish poor health.
The package has 15 releases since March 2022, but none in the last 12 months and the latest release was about 15 months ago. This is a meaningful maintenance concern despite a previously regular release interval of about 59 days.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This is the strongest maintenance concern in the available evidence.
There are no open issues or pull requests and no recent issue or pull-request activity. While this may indicate a quiet project rather than unresolved problems, it provides little evidence of ongoing maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.