The package is mature and the repository was updated with this release, but recent development has stopped and only one registry release arrived in the last 12 months. Its license, tests, changelog, and simple dependency profile support adoption, while security scanning is absent.
68%
Total Score
83
100
78
83
The package has existed for about 7 years with 43 releases, but only one release was published in the last 12 months, indicating a much slower recent cadence.
The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push provide some compensating evidence, but current development activity is still limited.
The repository name matches the package name, but its README does not mention the package. The name match reduces concern, though the missing README reference slightly weakens transparency.
The repository has zero stars and forks and two watchers. Popularity is only supporting evidence, but these numbers provide little external validation.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0 || dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.