Risky to adopt: the package has had no release or commit activity for more than eight years, with no tests and no README for consumers. It is not deprecated or archived, and the repository matches the package, but the long abandonment period makes ongoing compatibility and maintenance unlikely.
42%
Total Score
50
50
71
50
The latest release was published on July 9, 2017, and there have been no releases in the last 12 months. More than eight years without a release is a substantial abandonment concern, despite the package having a short early release interval.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in 2017. This provides no evidence of current maintenance capacity.
The package declares seven runtime dependencies, including several related Yii modules, so adopting it also brings a moderately broad dependency surface. The signal does not show that any dependency is unsafe or unmaintained, so this is only a mild concern.
The artifact includes a changelog, which provides some project history, but it has no README and no tests. The missing README is a real consumer-transparency gap for a Yii module, while the absence of tests weakens confidence in future changes.
The repository has zero stars and forks and only one watcher, giving little supporting evidence of community review or adoption. Popularity is secondary, but these values provide no compensating signal for the inactive project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
simple-yii2/cms Version >=1.0.0 | — | — |
simple-yii2/sitemap Version >=1.0.0 | — | — |
dkhlystov/yii2-storage Version * | — | — |
dkhlystov/yii2-translit Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.