The six-file package is identifiable, licensed, documented, and has no install scripts or registry deprecation. Its small scope and clean packaging reduce complexity, but the maintenance record remains too weak for a dependable choice.
43%
Total Score
0
100
75
75
There has been only one release, published about 11 years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance or compatibility work.
The repository recorded no commits and no active maintainers during the last three months, after its last push in November 2021. This strongly increases abandonment risk.
The repository is not archived, which preserves a path for maintenance, but its last push was about five years ago and does not offset the inactivity shown elsewhere.
The repository has no security policy. For a small extension this is a transparency gap rather than a severe risk, but it provides no clear vulnerability-reporting process.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.