Usable with caveats: the project is actively maintained and well documented, but it is young and all recent repository work comes from one contributor. The missing security policy adds a smaller transparency gap.
72%
Total Score
50
100
89
88
Only one registry publishing maintainer is listed, consistent with the user-owned repository but leaving little publishing redundancy.
The package and repository are owned by the same individual account rather than an organization, so the single-maintainer concentration represents a genuine succession risk.
Six releases in the first 106 days, with releases about a day apart at the median, show active early development. The short history still provides limited evidence of long-term maintenance.
One contributor made 100% of the 10 recent commits, creating a meaningful continuity risk for a user-owned project despite the recent activity.
There were 10 commits in the last three months, showing recent activity, but all were made by one active maintainer.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/html Version ^3.13 || ^4.0 | — | — |
yiisoft/widget Version ^2.2 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.