The package is clearly licensed and its repository matches the published package. Its small artifact lacks tests and changelog material, while the README says usage is not documented.
12%
Total Score
0
57
50
Packagist marks the entire package as abandoned, with no replacement package supplied. This is a direct warning against taking a new dependency on it.
The latest release was on May 14, 2021, and there were no releases in the last 12 months. The long period without a release indicates abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged lack of releases.
A README is present, but it explicitly says usage is not documented; tests and a changelog are absent, which is normal for published artifacts and is not itself a gap.
Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and maintenance gap, secondary to the abandonment evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2-bootstrap Version ~2.0.0 | — | — |
pozitronik/yii2-helpers Version 1.0.5 | — | — |
pozitronik/yii2-cachedwidget Version ~1.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.