The small artifact has a README and a declared GPL-3.0+ license, but no tests or security policy. Its dependency and build setup are simple, yet there is no recent project activity to support continued fixes.
8%
Total Score
0
30
75
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because future fixes and support are unlikely.
This package has only one release, published in March 2019, and none in the following nearly seven years. That leaves no evidence of an ongoing maintenance or release process.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long maintenance pause. No provided signal shows compensating development activity.
The linked repository is archived and was last pushed in March 2019. An archived source repository is a strong indication that the release is no longer maintained.
The artifact includes a usable README and installation instructions, which helps consumers, but it has no tests or release notes. These are secondary concerns compared with the abandonment evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0 | — | — |
bower-asset/air-datepicker Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.