The single-person project has no recent maintenance or security process, increasing the chance that framework and dependency issues remain unresolved. A clear license, substantial README, matching repository, and release notes provide useful transparency.
38%
Total Score
33
50
81
88
The package has had no releases in nearly 9 years, despite 26 releases overall; the long gap is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, confirming that maintenance has stopped rather than merely slowing.
The package declares 12 runtime dependencies and no development dependencies, creating a broad compatibility surface with no visible development setup to support ongoing maintenance.
Only one registry maintainer is listed, leaving limited visible publishing capacity and increasing bus-factor risk for an already inactive project.
The registry namespace and repository owner match, providing consistent ownership context; the owner is an individual rather than an organization, so continuity depends on one project owner.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
kartik-v/yii2-grid Version 3.* | — | — |
kartik-v/yii2-icons Version 1.* | — | — |
kartik-v/yii2-widgets Version 3.* | — | — |
pavlinter/yii2-buttons Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.