the yii3 attribute parser
55%
Total Score
50
86
75
The package has had no release in nearly four years: its latest release was November 29, 2022, despite seven releases overall. This materially raises abandonment risk.
There were zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating little current maintenance capacity.
All 5 of 5 analyzed action references are unpinned, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or severity-rated findings, limiting this to a hygiene concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/di Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.