The README explains installation and usage, and the package has a simple Composer dependency. Its repository is small and lacks security tooling, so ongoing support is limited.
38%
Total Score
100
71
75
This is the package's only release, published over eight years ago, with no releases in the last 12 months. That strongly suggests abandonment risk despite the stable 1.0 version.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not decisive by itself, but these figures provide little supporting evidence of active adoption or community maintenance.
The repository is not archived, which is a positive counter-signal, but it has not been pushed since February 2018. The still-open status does not offset the long period without source updates.
No security policy was found. This is a secondary transparency gap for a small widget, but it gives consumers no documented process for reporting or handling security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.