yarcode/yii2-tools-yarcode
The two-star repository and absent security policy offer little evidence of ongoing community or security support. It has a clear MIT license and a matching source tree, but those positives do not offset the age.
38%
Total Score
0
67
50
Health Score Breakdown
The package has had no releases in about nine years, despite eight releases concentrated in its first month. This is strong evidence of abandonment risk for a dependency.
There were zero commits and zero active maintainers in the last three months, consistent with the repository having been inactive since 2017.
The repository has only 2 stars and 2 forks, providing little independent evidence of adoption or community support. Low popularity alone is not disqualifying, but it reinforces the maintenance concern.
The repository is not archived, but its last push was on August 2, 2017, so the active status does not compensate for the long period without visible maintenance.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a modest transparency gap, though it is less important than the prolonged inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Valentin Konusov |
| Alexey Samoylov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ^2 | — | — |
nesbot/carbon Version ^1.9 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.