Tests, a clear license, and a matching source repository provide useful transparency. The package has had no registry release since March 2018 and no recent commit activity, while its very small user base offers little evidence of ongoing support.
45%
Total Score
50
71
75
The latest release was in March 2018, with no releases in the last 12 months, indicating a long period without published maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with stalled development.
The repository has only 2 stars, 1 fork, and 3 watchers, so there is limited visible community support to compensate for the inactive maintenance record.
Composer build tooling is present, but no security scanning tools were detected; this is a minor transparency gap alongside the stronger maintenance concerns.
The repository has no security policy, leaving vulnerability-reporting expectations unspecified; this is a hygiene gap rather than evidence of abandonment by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0 | — | — |
sibds/yii2-trash-behavior Version ^0.4 | — | — |
creocoder/yii2-nested-sets Version 0.9.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.