Risky to adopt: the last release was over seven years ago, with no releases in the past 12 months, and no source repository is declared. The package is licensed, stable, and has a substantive file tree, but its maintenance and transparency are too weak for a dependable new dependency.
38%
Total Score
100
70
100
The latest release was published over seven years ago, and there were zero releases in the last 12 months. This is strong evidence of abandonment risk despite the package having 23 releases overall.
The artifact contains tests, which is a small positive, but it has no README for consumers and no release notes were available. The missing README is a real usability and transparency gap for a framework module.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ticmakers/yii2-core Version * | — | — |
ticmakers/yii2-notifications Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.