Yii2 widget for bootstrap-year-calendar plugin
43%
Total Score
unhealthy
Risky: no release or commit activity since 2016 leaves maintenance effectively unverified.
This is a 10-year-old package with only one release, and it has had no releases in the last 12 months. That strongly raises abandonment risk despite the stable 1.0.0 version.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided signal demonstrates current maintenance capacity.
Six issues remain open, with no issues or pull requests closed in the last month. This is supporting evidence that maintenance is inactive, though the issue count alone is not severe.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a maintenance and hygiene gap, though not a severe standalone risk.
The linked repository has no security policy. For a small extension this is a transparency gap, but it is less important than the demonstrated lack of maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2-bootstrap Version ~2.0.0 | — | — |
bower-asset/bootstrap-year-calendar Version ~1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.