The stable version and matching organization-backed repository help, but six runtime dependencies add maintenance surface. No security policy or scanning is present, and the project has been inactive for years.
42%
Total Score
50
50
75
50
The package has had no release in over seven years, with zero releases in the last 12 months; its earlier eight-release history does not offset the prolonged pause.
There were zero commits and zero active maintainers in the last three months, consistent with a project that has effectively stopped receiving maintenance.
Six runtime dependencies increase the maintenance and compatibility surface for an old package, with no development dependencies indicating a visible test setup in the manifest.
Four issues remain open while there were no new or closed issues and no pull-request activity in the last month, providing no evidence of active issue management.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
simple-yii2/cms Version >=1.0.0 | — | — |
simple-yii2/sitemap Version >=1.0.0 | — | — |
dkhlystov/yii2-storage Version * | — | — |
dkhlystov/yii2-translit Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.