The source project is active, licensed, documented, and backed by three recent contributors with read-only CI permissions. Its registry status still makes long-term dependency support unreliable.
38%
Total Score
90
100
83
100
Packagist marks the entire package abandoned, with no distinct replacement package identified; this is a major warning for future dependency support.
The package has existed for about 10 years with 39 releases and a latest release on January 8, 2026, but only one release in the last 12 months indicates a slower current cadence.
Two pull requests were merged in the last month, but there were no new or closed issues and 64 issues remain open, indicating limited recent issue handling.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.14 | — | — |
symfony/process Version ^3.3||^4.0||^5.0||^6.0||^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.