yiisoft/yii2-dev

Yii PHP Framework Version 2 - Development Package

Latest 3.0.0-alpha1

Packagist

73%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Repo package mention

The repository name does not match the package name and its README does not mention this package. Because neither link is present, the source relationship should be verified rather than assumed.

Version stability

The registry reports a stable major line and no recent prerelease share, although the assessed version is labeled alpha while the latest stable version is 2.0.55. This makes the specific release less mature than the package's stable line.

Vulnerabilities

Title	Versions	Severity
CVE-2025-2689 yiisoft/yii2-dev is vulnerable to Improper Input Validation in versions 0.0.0 - 2.0.45.	0.0.0 - 2.0.45	Medium
CVE-2018-7269 yiisoft/yii2-dev is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 2.0.12.1, 2.0.13 - 2.0.13.2 and 2.0.14 - 2.0.15.	0.0.0 - 2.0.15	Critical
CVE-2018-8074 yiisoft/yii2-dev is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 2.0.0 - 2.0.15.	2.0.0 - 2.0.15	High
CVE-2017-11516 yiisoft/yii2-dev is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 2.0.12 - 2.0.12.	2.0.12 - 2.0.12	Medium
CVE-2021-3689 yiisoft/yii2-dev is vulnerable to Use of Insufficiently Random Values in versions 0.0.0 - 2.0.43.	0.0.0 - 2.0.43	High

Package versions

Maintainers

Qiang Xue

Alexander Makarov

Maurizio Domba

Carsten Brandt

Timur Ruziev

Paul Klimov

Dmitry Naumenko

Boudewijn Vahrmeijer

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ~1.0.2	—	—
cebe/markdown Version ~1.0.0 \| ~1.1.0	—	—
psr/http-message Version ~1.0.0	—	—
psr/simple-cache Version ~1.0.0	—	—
yiisoft/yii2-composer Version ~2.0.4	—	—