Its small, readable artifact has one runtime dependency and no install-time scripts. The project has had no releases or commits since 2016, with one maintainer and no security scanning.
43%
Total Score
50
100
71
75
The latest release was in March 2016, with no releases in the last 12 months and only three releases overall. This long silence materially raises abandonment risk.
One registry maintainer is consistent with a small user-owned project, but it leaves little visible redundancy when paired with the absence of recent activity.
The repository has had zero commits and zero active maintainers in the last three months, consistent with activity stopping in 2016. The stable, tiny scope partly limits maintenance needs but does not remove the risk.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of an active support community.
Composer is used for the build, but no security-scanning tooling is present. That is a modest transparency and maintenance gap, especially for a project with no recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version 2.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.