sqiva/yii2-vendor
The package has a very small README, install-time scripts, and no security scanning; its repository does match the package and is not archived. Its stable version and two declared dependencies do not offset the long abandonment risk.
32%
Total Score
0
100
69
50
Health Score Breakdown
Only one release exists, and there have been no releases for about 9 years. This is strong evidence of abandonment for a package intended as a reusable dependency.
The repository has recorded zero commits and zero active maintainers in the last 3 months, consistent with the absence of releases and indicating no current maintenance.
A proprietary license is declared in the manifest, so the release is licensed, but the restrictive licensing choice may limit use and redistribution compared with a conventional open-source license.
The package runs post-install and post-update Composer scripts, which add installation behavior that consumers must trust and maintain despite the project's age.
The package includes a README, but it is only 13 characters long and provides little consumer guidance. Missing tests and a changelog are normal for published artifacts and are not counted against it.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ^2.0.11.2 | — | — |
fxp/composer-asset-plugin Version ^1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.