The package has a small, readable artifact, a clear MIT declaration, and no install-time scripts. It has no tests, security policy, or security scanning, so future compatibility and vulnerabilities may go unnoticed.
42%
Total Score
38
100
75
83
This is the package's only release, published over six years ago, with no releases in the past 12 months. That is strong evidence of abandonment risk, although the package is not marked deprecated.
There were zero commits and zero active maintainers in the past three months, consistent with a project that has been inactive for years.
The registry lists one publishing maintainer. A single maintainer is a limited support base, and the repository's long inactivity provides no compensating evidence of active stewardship.
The repository is owned by an individual account rather than an organization. That is not inherently unhealthy, but it offers less visible institutional backing alongside the inactive commit history.
There were no new or closed issues or pull requests in the past month. With no open work, this is not itself negative, but it provides no evidence of ongoing maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version >=2.0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.