It has a clear MIT license, a readable package, and a lightweight dependency set. Maintenance evidence is thin, and the repository has no security policy, so pinning this release is preferable.
60%
Total Score
50
100
83
75
Only two releases exist across about 15 months, with one release in the last 12 months and a typical gap of about seven months. The package is not abandoned on this evidence, but its release cadence is slow.
The repository recorded no commits and no active maintainers in the last three months; its last push was about eight months before collection. That leaves limited recent evidence of ongoing maintenance.
The repository has zero stars, forks, and watchers after about 15 months. This indicates little visible community adoption, but popularity is supporting evidence rather than a verdict.
The repository has no security policy. This is a transparency and response-process gap, although it is not evidence of a security defect by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.50 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.