The package has a clear GPLv2 license, a README, and a changelog. Its user-owned repository has no tests or security policy, while eight issues remain open without recent activity, limiting confidence in ongoing support.
42%
Total Score
50
50
88
75
The UI package declares 10 runtime dependencies, including several frontend asset packages, creating a broad dependency surface for an old package. No development dependencies are declared to support testing or maintenance.
The repository is owned by an individual account matching the registry namespace, so the source appears correctly attributed, but it does not provide organizational maintenance backing.
This package has only one release, published in November 2014, with no releases in the last 12 months. That long release gap is strong evidence of abandonment risk.
There were no commits and no active maintainers in the last three months. Combined with the last push being in 2018, this materially increases abandonment risk.
Eight issues remain open, with no new or closed issues and no pull-request activity in the last month. This is consistent with limited current maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version >= 2.0.0 | — | — |
bower-asset/tinymce Version 4.* | — | — |
bower-asset/ckeditor Version 4.* | — | — |
bower-asset/dropzone Version 3.* | — | — |
bower-asset/ionicons Version 1.5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.