The package has no README or security policy, limiting documentation and response transparency. Its small dependency set and matching source tree provide some context, but not enough to offset the remaining concerns.
8%
Total Score
0
100
33
83
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct indication that continued maintenance should not be expected.
The package has only two releases, both in September 2019, and none in the last seven years. This strongly indicates abandonment rather than an actively maintained release line.
The repository recorded no commits and no active maintainers in the last three months, consistent with its archived state and lack of ongoing maintenance.
The linked repository is archived and was last pushed nearly seven years ago, so new fixes and compatibility work are unlikely.
The package contains no README, tests, or changelog. Missing tests and changelog are normal in a published artifact, but the absent README is a documentation gap for a library consumers must integrate.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
uraankhayayaal/yii2-materializecomponents Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.