The MIT license, README, and matching source keep this small extension transparent. Its single-maintainer profile and absent security policy leave limited review capacity.
58%
Total Score
50
81
50
The package has only 3 releases, with the latest on October 5, 2019 and none in the last 12 months. The repository was pushed more recently, but registry delivery is still markedly stale.
Only one registry account has publish access. That is a limited publishing base for a user-owned project and increases dependence on one person, although it does not by itself show abandonment.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the long release gap, this leaves current maintenance capacity uncertain.
Composer is used as the build tool, but no security scanning tools were detected. For this small PHP asset extension, the missing scanning is a hygiene gap rather than a severe dependency risk.
The repository has no security policy. That reduces transparency about vulnerability reporting and response expectations, though the package's small scope limits the severity of this gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.0 | — | — |
fortawesome/font-awesome Version ^5.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.