soft-box/yii
The package includes tests, documentation, a changelog, and a stable major version. Its declared MIT license conflicts with the detected BSD-3-Clause license, so verify licensing before adoption.
58%
Total Score
50
100
69
75
Health Score Breakdown
Only two releases exist, both published in June 2022, with no releases in the last four years; this is substantial evidence of limited ongoing maintenance.
The artifact contains license files, so licensing is documented, but the manifest declares MIT while the detected package license is BSD-3-Clause; that mismatch warrants verification.
The repository is owned by an individual account rather than an organization, and the registry has one publishing maintainer; this indicates a thin visible backing structure.
There are no open issues or pull requests and no activity in the last month; combined with the old last update, this provides no evidence of active maintenance.
The repository has zero stars and forks and one watcher, providing little supporting evidence of community adoption or review.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rod |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.