yii2-extensions/bootstrap5
The package includes repository tests, a changelog, an MIT license, and Dependabot scanning. Its workflows have no detected dangerous findings, but all action references are unpinned.
55%
Total Score
50
83
75
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months, indicating no current maintenance activity despite the repository not being archived.
This is the package's only release, published in January 2024, with no releases in the following 12 months; that leaves its maintenance direction uncertain.
The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of broad adoption or community support. Popularity is supporting evidence, so this is a modest concern rather than a decisive risk.
All four workflows were analyzed with no dangerous audit findings, no untrusted checkouts, and no script injection. However, all 4 of 4 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ^2.0.49 || ^2.2 | — | — |
yii2-extensions/asset-bootstrap5 Version ^0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.