The repository matches the package and the MIT license is declared. The short README and absent security policy provide little support for maintaining or integrating this substantial extension.
38%
Total Score
0
70
50
The package has had no releases in the last 12 months, and its latest release was in October 2021, nearly five years ago. Seven historical releases show prior activity but do not offset the prolonged release silence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating a strong abandonment risk.
A README is present, but it is only 455 characters and provides minimal usage guidance for a substantial CMS extension. The absence of tests and a changelog in the package is normal packaging practice and is not a concern by itself.
The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency gap, though it is secondary to the much longer maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.