The README is thorough, the package has a stable release and a clear license, and its dependency surface is small. Maintenance evidence is weak, with no recent commits or releases and no automated security scanning, so future compatibility support is uncertain.
58%
Total Score
63
100
78
83
One registry maintainer is consistent with a small user-owned project, but it also indicates limited publishing redundancy when combined with the inactive repository.
The latest release was over three years ago, with no releases in the last 12 months. Seven releases show an established package, but the current cadence provides little evidence of ongoing maintenance.
There were no commits and no active maintainers in the last three months. Together with the old latest release, this is strong evidence that maintenance has stopped or slowed substantially.
Two issues remain open, with no issues or pull requests opened or closed in the last month. This is consistent with the broader lack of recent project activity.
Seven stars and four forks show limited adoption and little community support. Popularity is supporting evidence rather than a verdict, but it offers little compensating maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version >=2.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.