The MIT license, focused package tree, README, and release notes make the package understandable to integrate. It has no security policy or scanning, and its small maintainer base offers limited resilience.
40%
Total Score
25
50
71
83
The package is over eight years old, has only three releases, and has had no releases in the last 12 months; the last release was in May 2018. This is strong evidence that maintenance has stopped.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap. No provided signal shows recent maintenance to compensate for this.
It has three runtime dependencies and no development dependencies, a modest profile for a Yii2 widget, though the older Bower-based dependencies reflect its age.
Only one registry account has publish access, so release continuity depends on a single maintainer. The linked repository is user-owned rather than organization-backed, providing no shown capacity to compensate.
The repository has zero stars and forks and one watcher, offering little supporting evidence of broad community adoption or backup maintenance. Popularity is supporting evidence, so this reinforces rather than determines the verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
bower-asset/jquery Version >= 1.11.0 | — | — |
bower-asset/jquery-ui Version >= 1.11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.