Consumer documentation is minimal, and the repository has no security scanning or security policy. The stable release and matching repository help, but eleven years without activity makes long-term support unlikely.
35%
Total Score
0
42
50
The release has no declared license, no license file, and no repository license file. Developers cannot clearly establish permission to use or redistribute it.
This is the package's only release, published over 11 years ago, with no releases in the last 12 months. That strongly suggests abandonment rather than an actively maintained dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push being over 11 years ago. No compensating recent maintenance is visible.
The package and repository each contain only two files, indicating an extremely small implementation with little surrounding documentation or validation material. This may fit a thin asset wrapper, but it offers limited evidence of maturity.
The package contains no README, tests, or changelog; missing tests and changelog are normal in published artifacts, but the absent README leaves consumers without package-level guidance. The exact version does have a GitHub release, which provides some release transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
bower-asset/slick-carousel Version 1.3.15 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.