It has a clear BSD-3-Clause license, a matching source repository, and only one runtime dependency. Its tiny two-file scope limits exposure, but the lack of tests, changelog, and security scanning reduces transparency.
38%
Total Score
0
100
63
100
The package has only one release, published in July 2016, with no releases in roughly 10 years. That strongly suggests abandonment, with no newer release evidence to compensate for the age.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no observable ongoing maintenance.
The artifact has no README, tests, or changelog, while the repository also reports none. Missing tests and release documentation reduce transparency for a library, although the package's very small scope partly limits the impact.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version >=2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.