28%
Total Score
0
40
67
No declared license, license file, or repository license file was detected. That creates a material adoption and redistribution risk with no compensating licensing evidence.
The latest release was published about eight years ago, with zero releases in the last 12 months. This is strong evidence of abandonment risk despite the package having eight historical releases.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance capacity.
The published artifact contains only composer.json and yii. This may be intentional for a small command-line package, but it provides little transparency into implementation or release contents.
The repository name does not match the package name, and no README package mention was available. That makes the package-to-repository relationship less verifiable, although a name mismatch can occur for subpackages.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2-composer Version ~2.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.