The package includes tests, a substantial README, a matching MIT license, and a clean release workflow. Maintenance evidence is still thin after one release, with no commits in three months and all three workflow actions unpinned.
62%
Total Score
67
100
78
50
The repository is owned by an individual user rather than an organization, so the single registry maintainer provides limited visible continuity backing.
This is the first and only release, published 113 days ago, so there is not yet enough release history to demonstrate sustained maintenance.
There were zero commits and zero active maintainers in the last three months, which is weak evidence for ongoing maintenance for a package only 113 days old.
The repository has zero stars, forks, and watchers. This limits independent adoption evidence, but popularity is supporting evidence and does not by itself make the package unsafe to depend on.
The repository uses Make and Composer for build tasks, but no security-scanning tooling is present, leaving a modest hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.