Unfit to use: Packagist marks the package as abandoned, and its last registry release was over five years ago with no releases in the past year. The linked repository is not archived and is well matched, but recent commit activity is absent, so adoption carries substantial maintenance risk.
22%
Total Score
50
69
67
Packagist marks the entire package as abandoned, with yii2-starter-kit/yii2-file-kit listed as the replacement. This is a severe adoption risk even though the repository remains available.
The package has 29 releases since September 2014, but its latest release was in July 2020 and it has had no releases in the last 12 months. That long release gap indicates the published dependency is no longer actively maintained.
The repository recorded zero commits and zero active maintainers during the last three months. Combined with the stale registry release, this leaves little evidence of ongoing maintenance.
There are 19 open issues and no new or closed issues or pull requests in the last month. This suggests limited current project activity, consistent with the stale release history.
The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than a decisive health risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/flysystem Version ^1.0 | — | — |
yiisoft/yii2-jui Version ^2.0.0 | — | — |
rmrevin/yii2-fontawesome Version ^3.4 | — | — |
npm-asset/blueimp-file-upload Version ^9.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.