The package has a clear README, matching source tree, and MIT licensing. Its small dependency surface and lack of install scripts are reassuring, but the repository has no security policy.
44%
Total Score
0
100
81
75
The package has had only two releases, both in April 2018, with no release in more than eight years. This is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance.
Three stars, no forks, and no watchers provide little supporting evidence of broad community review or backup maintenance. Popularity is only supporting evidence, so this is a mild concern rather than a verdict.
The linked repository has no security policy, reducing transparency about how vulnerabilities would be reported or handled. The package's small scope limits the effect but does not remove the gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.