The package is licensed, documented, and has only one runtime dependency. Organization backing offsets its low popularity and single recent contributor, though no security policy or scanning is visible.
82%
Total Score
75
100
89
88
One contributor made all commits in the last three months, giving the repository a concentrated bus factor. Organization ownership partly compensates because maintenance can be handed off.
There was one commit from one active maintainer in the last three months. Recent activity is positive, but the low volume provides only modest evidence of maintenance capacity.
The repository has one star, zero forks, and one watcher. This shows limited adoption, but popularity is supporting evidence and does not outweigh the maintenance signals.
Composer is used for builds, but no security-scanning tool is present. The missing scanner is a hygiene gap rather than evidence that the release is unsafe or abandoned.
The repository has no security policy. This reduces transparency about vulnerability reporting and response, though it is not by itself evidence of poor maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
skeeks/yii2-assets-auto-compress Version ~1.4.0 || dev-master@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.