Clear documentation, licensing, repository tests, and disciplined workflows improve confidence. The project also uses build and static-analysis tooling, though it lacks a published security policy.
70%
Total Score
67
89
83
The repository is owned by an individual rather than an organization, so the single-person maintenance concentration is not offset by visible organizational backing.
The package is only about 96 days old with three releases, but releases arrived roughly every five days, showing early activity rather than abandonment. Its short history still limits maturity evidence.
All 10 recent commits came from one contributor, leaving maintenance highly dependent on a single person and increasing continuity risk.
The repository has no stars, forks, or watchers. This is limited supporting evidence for maturity, but popularity alone does not outweigh the observed maintenance and tooling.
The repository has no published security policy, which reduces transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/data Version ^2.0 | — | — |
yiisoft/html Version ^3.13 || ^4.0 | — | — |
yiisoft/user Version ^2.0 | — | — |
psr/container Version ^2.0 | — | — |
yiisoft/router Version ^3.1 || ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.