Usable with caveats: this is a clean, well-documented first release with tests in the repository and clear organization backing. It has no maintenance track record yet, and the repository lacks security scanning and a security policy.
72%
Total Score
88
100
83
90
This is the package's first release and it is only 0 days old, so there is no record of maintenance, compatibility fixes, or sustained release activity yet.
The repository reports zero commits and active maintainers in the past three months, but the project is only 0 days old, so this reflects insufficient history rather than demonstrated abandonment.
The repository currently has zero stars, forks, and watchers, providing no external adoption evidence. Because this is a brand-new release, the lack of popularity is weak evidence rather than a standalone adoption blocker.
The repository uses Make and Composer build tooling, but no security scanning tools were detected. The missing scanning reduces transparency for supply-chain maintenance, though it is not evidence of maliciousness.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for consumers.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/data Version ^2.0 | — | — |
yiisoft/yii2 Version ^2.0.53 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.