The package includes clear documentation, tests, release notes, and a matching licensed source tree. Its build and security tooling are present, and the workflow audit found no actionable issues.
79%
Total Score
67
100
83
The registry namespace and repository are owned by the same individual account, so there is no organization-backed handoff capacity to offset the concentrated contributor base.
All 19 recent commits came from one contributor, creating a meaningful continuity risk if that maintainer becomes unavailable.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though the available security scanning partly offsets it.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/db Version ^2.0 | — | — |
symfony/console Version ^7.0 | — | — |
yiisoft/db-migration Version ^2.1 | — | — |
rasuvaeff/yii3-settings Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.