42%
Total Score
unhealthy
Risky: no releases or repository activity since April 2018.
The package has had no release in about 8 years: all 5 releases were published in April 2018, with none in the last 12 months. This is strong evidence of abandonment.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no current maintenance.
Only one registry maintainer is listed. The repository is user-owned rather than organization-backed, so there is little visible maintainer redundancy to compensate for the inactivity.
A README is present, which supports basic consumer documentation, but it explicitly says “STILL IN DEVELOPMENT.” The absence of tests and a changelog is normal for a published package and is not penalized.
The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no visible community signal to offset the inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
dektrium/yii2-user Version ^0.9.13 | — | — |
kartik-v/yii2-widgets Version @dev | — | — |
tomaivanovtomov/yii2-product Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.