skeeks/yii2-bootstrap4
The release has a clear BSD-3-Clause license, a README and changelog, and no install-time scripts. Missing security controls and the very small project footprint add transparency and maintenance concerns.
38%
Total Score
0
78
75
Health Score Breakdown
The package has had no release in over seven years, with zero releases in the last 12 months. Three releases provide some history, but the prolonged halt strongly raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no observed ongoing maintenance.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but this provides little evidence of a broad user or contributor base.
Composer is used as a build tool, but no security-scanning tools are present. The missing scanning is a modest hygiene concern for a package with otherwise limited recent project activity.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less severe than the lack of maintenance activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Semenov Alexander |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2-bootstrap4 Version ^2.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.