The MIT license, matching source tree, and absence of install scripts reduce adoption friction. It remains a small, lightly supported project without a documented security process.
42%
Total Score
50
70
75
The package has only two releases, and the latest was published in March 2019; there have been no releases in roughly seven years. This is strong evidence of abandonment risk despite the repository remaining available.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided maintenance signal compensates for this inactivity.
The repository has zero stars, one fork, and one watcher, providing little evidence of a broad user or maintainer community. Low popularity alone is not disqualifying, but it reinforces the thin-support concern here.
The repository has no security policy and no stated security contact or process. For a backup tool handling application and database data, this is a meaningful transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
yiisoft/yii2-httpclient Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.