The artifact is small and readable, and it avoids install-time scripts and registry deprecation. Its six runtime dependencies add upkeep, while repository maintenance and provenance could not be verified; the missing license also limits adoption confidence.
38%
Total Score
50
70
100
The package has only one release, published about 8 years ago, with no releases in the last 12 months. That strongly suggests abandonment or an unverified maintenance state.
The package declares six runtime dependencies and no development dependencies. The runtime dependency surface is manageable but adds maintenance and compatibility exposure for an old package.
No license declaration, license file, or detected license is present. This creates a genuine legal and adoption risk for a dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.14 | — | — |
kartik-v/yii2-icons Version ~1.4.4 | — | — |
yiisoft/yii2-bootstrap Version ~2.0.0 | — | — |
dmstr/yii2-adminlte-asset Version 2.4.4 | — | — |
2amigos/yii2-chartjs-widget Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.