The package has a clear README, matching source repository, modest dependencies, and no install-time scripts. Those positives do not compensate for the lack of ongoing maintenance evidence.
8%
Total Score
50
50
100
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk because the registry explicitly signals that maintenance has ended.
The package has only one release, published nearly nine years ago, with no releases in the last 12 months. This shows prolonged inactivity and increases abandonment risk.
The linked repository is archived and was last pushed nearly eight years ago. An archived source project is a strong indication that fixes and compatibility updates should not be expected.
The repository recorded no commits and no active maintainers in the last three months. This is consistent with the archived status and provides no evidence of current maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.5 | — | — |
kartik-v/yii2-markdown Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.