The package has clear usage documentation, a license, and a matching source repository. It lacks a security policy and security scanning, leaving maintenance safeguards limited.
42%
Total Score
33
100
67
75
The package is 936 days old but has had no releases in the last 12 months; all three releases were concentrated within about 7 hours, indicating no ongoing release maintenance.
There have been 0 commits and 0 active maintainers in the last three months, and the last repository push was in February 2024; this is strong evidence that maintenance has stopped.
The package and repository are owned by the same individual account rather than an organization, so the single-person ownership provides limited backing capacity.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a quiet project but does not by itself prove abandonment.
The repository has 3 stars, 0 forks, and 1 watcher, showing a very small user and contributor footprint. Popularity is supporting evidence rather than a verdict, but it offers little resilience against abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/html Version ^3.0 | — | — |
yiisoft/json Version ^1.0 | — | — |
yiisoft/files Version ^2.0 | — | — |
yiisoft/arrays Version ^1.0|^2.0|^3.0 | — | — |
yiisoft/assets Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.