steadyweb/engine-yii2
Its 92-file artifact includes tests, but it lacks a README and declares 21 runtime dependencies. The post-create-project-cmd install script adds execution complexity. The repository could not be found, so maintenance and provenance remain unverifiable.
32%
Total Score
50
33
50
Health Score Breakdown
This is the only release, published over seven years ago, with no releases in the last 12 months. That strongly suggests abandonment risk and outweighs the stable version label.
The package declares 21 runtime dependencies, creating a broad and potentially difficult maintenance surface for a project with only one old release.
The manifest declares a proprietary license, so the release is licensed, but that may impose usage restrictions for projects expecting an open-source dependency.
The post-create-project-cmd script runs during project creation, adding install-time behavior that consumers must understand and maintain.
The artifact includes tests, which is a small positive, but it has no README for a library consumers must integrate and no release notes evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ~2.0.15 | — | — |
imagine/imagine Version 0.7.1 | — | — |
yiisoft/yii2-gii Version ^2.0.6 | — | — |
guzzlehttp/guzzle Version 6.3.3 | — | — |
yiisoft/yii2-twig Version ~2.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.