The source repository has had no commits in over seven years, with no recent issue or pull-request activity. It also lacks a security policy and automated security scanning, leaving little evidence of ongoing support.
15%
Total Score
25
57
83
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because the release is explicitly withdrawn from active support.
The last registry release was over eleven years ago, and there have been no releases in the past twelve months. The package had 11 releases historically, but that earlier activity does not offset the prolonged release gap.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with a project that is no longer maintained. Its last push was over seven years ago.
There were no new or closed issues or pull requests in the past month, while 17 issues remain open. This provides no evidence that reported problems are being addressed.
Composer is used for the build, which is appropriate for this package, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
yiisoft/yii2-composer Version * | — | — |
yiisoft/yii2-bootstrap Version * | — | — |
yiisoft/yii2-swiftmailer Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.