The small scope, clear README, MIT license, and single runtime dependency make the package straightforward to inspect and integrate. Its age and limited project safeguards leave long-term compatibility and support uncertain.
40%
Total Score
0
100
79
50
The latest release was published in July 2016, with no releases in the last 12 months and only five releases overall. This long period without updates is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the registry's long release gap. No provided signal shows compensating maintenance activity.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance weakness rather than a standalone adoption blocker.
The repository has no security policy. This is a maintenance and disclosure-process gap, though the package's small scope limits its impact compared with the lack of recent development.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.