Its stable v1.1 release, focused dependency set, and usable README keep integration simple. However, no releases or commits have appeared since February–March 2022, and the tiny single-user project offers little evidence of ongoing maintenance.
55%
Total Score
0
100
81
75
The package has had no release in over four years, with all four releases concentrated around February 2022. That is strong evidence of inactivity, though the package may be functionally complete.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of current maintenance.
The repository has 0 stars, 1 fork, and 1 watcher, indicating a very small user and contributor base. Low popularity is supporting evidence rather than a verdict, but it provides little compensating maintenance signal.
The repository has no security policy, reducing transparency for reporting vulnerabilities. This is a secondary concern beside the much stronger evidence of inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.