Risky to adopt: the package has had no release or repository activity for about 8 years. It remains licensed, documented, tested, and not deprecated, but its long-term inactivity makes maintenance and compatibility a serious concern.
45%
Total Score
50
100
79
83
The latest release was published on May 16, 2018, with no releases in the last 12 months; this is strong evidence of abandonment for a dependency intended for ongoing use.
The repository recorded zero commits and zero active maintainers over the last 3 months, confirming that the long release gap reflects current inactivity rather than registry-only publishing delays.
The linked repository is not archived, which is a modest positive, but its last push was in May 2018 and this does not offset the extended lack of activity.
No repository security policy was found. This is a transparency gap, although it is less decisive than the clearly observed long-term maintenance inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0.6 | — | — |
yiisoft/yii2-bootstrap Version ^2.0.5 | — | — |
mtdowling/cron-expression Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.