The repository and registry have had no activity since May 2020, with no active maintainers in the last three months. It has a README, MIT declaration, and no install scripts, but its tiny footprint and absent security policy add little ongoing assurance.
42%
Total Score
50
100
78
83
The latest release was in May 2020, with zero releases in the last 12 months despite the package being over seven years old. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
Only one registry account has publish access. For an individually owned project this is not inherently abnormal, but it leaves little redundancy given the lack of recent activity.
There are no open issues or pull requests, and no recent issue or pull-request activity. This is consistent with a dormant small project, but the absence of backlog alone is not severe.
The repository has only 2 stars, 1 fork, and 1 watcher. Low popularity is supporting evidence rather than decisive on its own, but it provides little evidence of a broader maintenance community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
npm-asset/webuploader Version ^0.1.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.