Its single maintainer and limited source visibility leave little evidence of ongoing support. The stable version and single Yii2 runtime dependency keep adoption straightforward, but the maintenance record is too old.
43%
Total Score
50
100
67
The package is over eight years old, has only four releases, and has had no release in the last 12 months; the latest release was in August 2018. This is strong evidence of stalled maintenance despite its established age.
One registry account has publish access, indicating a thin publishing base. Because this reflects registry access rather than demonstrated activity, it adds some support risk but is secondary to the old release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.