The package is documented and has a clear MIT declaration, but it has no tests or security policy and no visible community support. Its bundled assets are substantial, yet future compatibility work is not demonstrated.
43%
Total Score
50
100
67
75
There has been only one release, on December 11, 2018, with none in the last 12 months. That long period without a new release is strong evidence of abandonment risk for a framework extension.
The repository has zero open issues and no issue or pull-request activity in the last month. This is not inherently bad for a small package, but alongside the old release it provides no evidence of current support.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external signal of adoption or community resilience.
The repository is not archived, which leaves the project technically open for maintenance, but its last push was also on December 11, 2018 and does not offset the stale release history.
The repository has no security policy. This is a transparency and response-process gap, although it is less significant for a small UI extension than for a service or security-sensitive library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.