The small, clearly scoped source tree, matching repository, license, and lack of install scripts reduce adoption friction. However, the project has no tests or security policy, and its tiny public footprint gives little evidence of ongoing support.
43%
Total Score
33
100
72
83
The package has 24 releases since March 2017, but its latest release was in November 2018 and it has had no releases in the last 12 months. This long release gap is a strong abandonment concern.
There were no commits and no active maintainers in the last three months. Combined with the old last push, this indicates no observable current maintenance capacity.
The repository owner is an individual user rather than an organization, so the single registry maintainer is consistent with the available ownership context. It still offers limited continuity if that maintainer stops work.
There are no open issues or pull requests and no recent activity. A clean tracker is not proof of health when the repository also shows no recent commits.
The repository has 2 stars, 0 forks, and 1 watcher, providing little community evidence or backup interest. Popularity is supporting evidence, but this reinforces the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.