The package is compact, documented, and has a single runtime dependency, with matching repository and package names. Its long period without releases or commits makes future fixes and compatibility work uncertain; pin this version if you accept that maintenance risk.
62%
Total Score
63
100
83
75
The registry lists one publishing maintainer. This is a thin individual maintainer base and adds some continuity risk, especially alongside inactive commits.
The package has had no release in over two years, with only six releases since 2015. That is a meaningful maintenance concern, although a small stable widget may not need frequent releases.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating stalled ongoing maintenance.
There are two open issues and one open pull request, with no issue or pull-request activity in the last month. The small backlog is not severe, but it reinforces the lack of recent activity.
The repository has seven stars and two forks, indicating limited adoption. Popularity is only supporting evidence, so this modestly reduces maturity confidence but does not determine the verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.