58%
Total Score
caution
Usable with caveats: no registry release since December 2019 leaves this dependency materially stale.
The latest release was in December 2019, with no releases in the last six years; this is strong evidence of stale maintenance despite the repository receiving a later push.
There were no commits or active maintainers in the last three months, reinforcing the concern that active maintenance has stopped.
The artifact and repository match as a small five-file project containing the source, manifest, README, and license, which is transparent but offers little project structure.
A README is present and includes installation and usage examples. No tests or changelog are present, but those omissions are normal in a published artifact; the repository also has no tests or changelog, limiting maintenance transparency.
The repository is owned by an individual user rather than an organization, so the single registry maintainer represents a genuinely thin backing structure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2-httpclient Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.