A single maintainer and no security policy reduce confidence in long-term support. The package has a clear README, stable version, matching repository mention, and no install-time scripts, but its very small project footprint offers limited resilience.
42%
Total Score
33
100
78
83
This is the only release, published over 10 years ago, with no releases in the past 12 months. That is strong evidence of abandonment risk for a dependency.
There were no commits and no active maintainers in the past three months, consistent with a project that has been inactive since 2015.
Only one registry maintainer account is listed, leaving little publishing redundancy. The repository is also owned by a user rather than an organization, so no broader backing is shown.
The registry namespace and repository owner match, but both identify an individual user rather than an organization, so the signals show ownership continuity without broader project backing.
The repository has zero stars and forks and only one watcher. Popularity is not required for a small package, but these counts provide no supporting evidence of active community use.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nsept/yii2-mousewheel Version * | — | — |
bower-asset/jquery.jscrollpane Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.