The package is small and easy to inspect, with one Yii2 runtime dependency and no install scripts. Its README and MIT license provide basic adoption context, but the project shows limited ongoing maintenance.
58%
Total Score
50
100
81
83
Four releases arrived within roughly two hours, followed by about 11 months without another release. That burst-and-pause pattern weakens confidence in sustained maintenance.
The repository recorded zero commits and zero active maintainers in the past three months, indicating no recent development activity.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of community signals reinforces the limited-maintenance picture.
The repository uses Composer, but no security scanning tooling was detected. This is a modest transparency and maintenance gap for a dependency published to a registry.
No security policy was present in the repository. This does not indicate a vulnerability, but it provides little guidance for reporting or handling issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.