rmrevin/yii2-favicon-widget
Documentation, tests, a changelog, and an MIT license make the package easy to inspect and integrate. Its small three-dependency footprint is straightforward, but no security policy or scanning evidence limits transparency.
43%
Total Score
50
100
75
88
Health Score Breakdown
The package has five releases, but the latest was published nearly ten years ago and there were no releases in the last 12 months. This is strong evidence of abandonment risk despite its earlier release cadence.
The repository had zero commits and zero active maintainers in the last three months, consistent with nearly ten years since the last push. This materially increases abandonment risk.
Composer is used as the build tool, which fits the package ecosystem. No security-scanning tools are configured, leaving a modest transparency gap.
The linked repository is not archived, but its last push was nearly ten years ago. The unarchived status provides little compensation for the lack of recent maintenance.
The repository has no security policy. For a small widget this is not independently severe, but it limits guidance for reporting and handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Revin Roman |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ~2.0 | — | — |
yiisoft/yii2-imagine Version ~2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.