zabachok/yii2-vega
The repository has no security policy or security scanning, and its popularity is effectively zero. The README and release notes help consumers, but they do not offset the long maintenance gap.
38%
Total Score
100
67
83
Health Score Breakdown
This is the package's only release, published about 9 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk.
The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of community use or outside maintenance capacity.
Composer is used for builds, but no security scanning tools are present. This is a hygiene and transparency gap, though it is less severe than the prolonged inactivity.
The repository is not archived, which is a positive sign, but its last push was about 9 years ago and does not offset the lack of ongoing releases.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This adds transparency risk for a package intended to run inside an application.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniil Romanov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version * | — | — |
sersid/yii2-font-awesome-asset Version * | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.