yii2mod/yii2-image
The package has a matching repository, a clear README, and no install-time scripts. Its Apache-2.0 declaration conflicts with the repository’s detected MIT license, while security safeguards are limited.
42%
Total Score
0
100
67
75
Health Score Breakdown
This is the package’s only release, published over 11 years ago, with no releases in the last 12 months. That strongly suggests abandonment, although the repository is not archived.
The repository had zero commits and zero active maintainers in the last three months, consistent with the package’s long release gap and weakening maintenance confidence.
The manifest declares Apache-2.0, but the repository license file was detected as MIT. The package is licensed, but the mismatch creates an avoidable legal-transparency concern.
Composer is used for the build, but no security scanning tools were detected. For an old, inactive package, this leaves dependency and release hygiene less visible.
The linked repository has no security policy. This does not establish a security defect, but it reduces transparency for reporting and handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dmitry Semenov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2-imagine Version * | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.