Its small, focused artifact has a matching repository, clear README, and only one runtime dependency. The repository has no security policy and little visible adoption, so maintenance ownership is difficult to verify.
39%
Total Score
0
100
72
83
The package has had no release in more than 10 years, despite a history of five releases; this is strong evidence of abandonment risk.
There were no commits and no active maintainers in the last three months, consistent with the much longer release hiatus and increasing abandonment risk.
No declared license, license file, or repository license file was detected, leaving the legal terms for reuse unclear.
The repository has zero stars, one fork, and one watcher; popularity is only supporting evidence, but this provides little external evidence of ongoing community support.
Composer is used for the project, but no security scanning tools were detected, leaving maintenance and vulnerability-monitoring practices unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.