The package is small and straightforward to integrate, with a focused dependency set and clear usage README. Its limited testing and security documentation provide little assurance for future maintenance.
43%
Total Score
33
100
81
75
This is the package's only release, published over 11 years ago, with no releases in the last 12 months. That strongly indicates stalled maintenance.
The repository has recorded zero commits and zero active maintainers in the last 3 months, consistent with the unchanged release history and substantial abandonment risk.
The artifact and repository contain only five files, including the implementation, manifest, and README. This is easy to inspect but offers little visible project depth.
The repository is owned by an individual account rather than an organization, so the single registry maintainer does not show broader project backing.
Five issues remain open, with no new or closed issues and no pull-request activity in the last month. This offers no evidence of active issue management.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.