The package includes tests, a README, a focused dependency set, and a matching source repository. Its single-person backing, limited adoption, and absent security policy provide little cushion if compatibility issues arise.
43%
Total Score
33
100
72
83
The package has had only four releases, with none in the last 12 months; its latest release was in March 2015, more than 11 years ago. This indicates prolonged abandonment risk despite the package not being deprecated.
There were zero commits and zero active maintainers in the last three months, consistent with no meaningful repository activity since March 2015 and reinforcing abandonment risk.
Only one registry account has publish access. That is a thin publishing base and, combined with the individual project backing and prolonged inactivity, increases continuity risk.
The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational backing to compensate for the single-maintainer and inactivity concerns.
The repository has 4 stars, 6 forks, and 2 watchers, indicating limited adoption and a small external support signal. Popularity is supporting evidence rather than a standalone health verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.