Usable with caveats: the package is small, licensed, clearly backed by its matching repository, and has no install scripts or deprecation notice. However, its last release and repository update were over six years ago, with no recent commits, tests, or security policy.
58%
Total Score
33
100
78
90
There were no commits or active maintainers in the last three months, consistent with the repository's last update being over six years ago and indicating abandonment risk.
The registry namespace and repository owner correspond to the same individual account. This provides direct ownership continuity, but not the resilience of organization backing.
Only two releases exist, and the latest was over six years ago with no releases in the last 12 months. This indicates long-term stagnation, although the package may be intentionally stable.
There is one open issue and no issue or pull-request activity in the last month, offering no evidence of an active maintenance process.
Four stars and four forks show limited adoption and provide little community support, though popularity is only supporting evidence for this small package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version >=2.0.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.