vjik/yii2-cycle-debug
The package is licensed, documented, and its repository matches the package. A single individual publishes it, with no security policy or scanning to add confidence.
40%
Total Score
25
75
50
Health Score Breakdown
The package has only two releases, and none in the past 12 months; its latest release was about 6 years ago. This is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the past 3 months, consistent with the long release gap and providing no evidence of current maintenance.
Only one registry account has publishing access, and the project is backed by an individual rather than an organization. This leaves limited visible publishing capacity, although access records alone do not prove inactivity.
Composer build tooling is present, but no security scanning tools are configured. That removes a useful maintenance safeguard, though the small package scope limits how heavily this should weigh.
The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap, not evidence of malicious behavior.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sergei Predvoditelev |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2-debug Version ^2.1 | — | — |
vjik/yii2-psr-logger-proxy Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.