The stable version and small dependency set make the package straightforward to integrate. Its release and repository activity stopped in July 2021, with no evident security policy or active community support.
48%
Total Score
25
100
63
75
The package has four releases, but none in the last 12 months and the latest was published in July 2021. This long release gap materially raises abandonment risk.
There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive for years.
The package has no README, tests, changelog, or release notes. Missing tests and changelog are normal for published artifacts, but the absent README reduces consumer transparency for a library.
The repository is owned by an individual user rather than an organization, so the single registry maintainer does not have visible organizational backing to compensate for inactivity.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no meaningful community-maintenance cushion.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.