yiiplus/yii2-desktop
The package has a clear README, tests, changelog, release notes, and an identified organizational repository. Its small user base, absent security policy, and long period without releases make future fixes and support uncertain.
52%
Total Score
50
75
50
Health Score Breakdown
The latest release was published over 7 years ago, with no releases in the last 12 months. The 13-release history shows it was once active, but provides little evidence of current maintenance.
The repository recorded no commits or active maintainers in the last 3 months, consistent with its long release gap. This materially increases abandonment risk even though the repository is not archived.
The repository has only 2 stars, 0 forks, and 5 watchers, providing little community evidence to offset the lack of recent maintenance. Popularity is supporting evidence rather than a verdict by itself.
The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap for a backend framework package, though it is not evidence of malicious behavior.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 xiankun Geng |
| Hongbin Chen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ^2.0.0 | — | — |
bower-asset/toastr Version * | — | — |
almasaeed2010/adminlte Version ^2.4.0 | — | — |
wenzhixin/bootstrap-table Version ^1.0.0 | — | — |
kartik-v/yii2-widget-select2 Version @dev | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.