The package includes a README, tests, and a matching source repository, which helps consumers understand and verify it. The license file is present, but its GPL-2.0 text conflicts with the MIT declaration. Pin cautiously because maintenance appears to have stopped.
46%
Total Score
0
75
75
This is the sole release, published in August 2022, with no releases in the last 12 months and roughly four years since publication. The package is not deprecated, but the long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, following a last push in August 2022. This strongly increases the risk that defects and compatibility issues will go unaddressed.
The artifact contains a LICENSE file and the repository also has one, but the declared MIT license conflicts with the detected GPL-2.0 text. That mismatch creates a genuine licensing concern despite the presence of license files.
The repository uses Composer build tooling, which supports reproducible package management, but no security-scanning tools were detected. The missing scanner is a secondary hygiene gap compared with the prolonged inactivity.
No security policy was found in the repository. This limits the project's transparency for reporting vulnerabilities, although the package's primary concern remains its long-term lack of maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
bower-asset/fullcalendar Version 3.10.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.