The source tree matches the package, and organization backing reduces single-publisher risk. Consumer documentation and security tooling are limited, leaving maintenance and integration concerns.
52%
Total Score
75
81
83
The package has no README, which is a real integration gap for a Yii library. Missing tests and changelog files in the published artifact are normal packaging practice and do not add concern here.
The latest release was about 8 years and 6 months ago, with no releases in the last 12 months. Its earlier cadence was regular, but the long release gap raises maintenance risk.
There were no commits or active maintainers in the last 3 months. The 2024 push shows some more recent activity, but current development appears inactive.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
simple-yii2/cms Version >=1.0.0 | — | — |
dkhlystov/yii2-treegrid Version * | — | — |
creocoder/yii2-nested-sets Version 0.9.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.