The MIT license, README, changelog, and matching repository make the package reasonably transparent to integrate. Its prerelease status and absent security policy add uncertainty for a production RBAC dependency.
38%
Total Score
75
70
75
The latest release was published over 11 years ago, with no releases in the last 12 months. The six closely spaced early releases show initial activity but do not offset the prolonged silence.
The repository has no recent issues or pull requests, and there were no new or merged changes in the last month. With the old last-push date, this supports an abandonment concern rather than showing active maintenance.
The repository has no documented security policy. For an RBAC module handling access control, this is a meaningful transparency gap, although it does not by itself establish a security defect.
The latest version is still marked alpha, and all recent releases were prereleases. That leaves compatibility and production-readiness uncertain, especially alongside the long release gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version 2.0.* | — | — |
matacms/matacms-base Version ~1.0-alpha | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.