albert-gee-ca/yii2-shop
Its 14 runtime dependencies and single publisher increase maintenance and update risk. The last release was over eight years ago, with no releases in the past year.
12%
Total Score
50
50
17
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement package specified. This is a severe warning against taking a new dependency on it.
The latest release was over eight years ago, and there were no releases in the past 12 months. The brief early release cadence does not compensate for the prolonged inactivity.
The package declares 14 runtime dependencies and no development dependencies, creating a broad compatibility and maintenance surface for an already inactive project.
Only one registry account has publish access. A single publisher provides little visible continuity if maintenance stops or urgent fixes are needed.
The latest version is v0.2.3, below a stable major version, which suggests limited maturity. This is secondary to the package's abandonment and long inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Albert Gainutdinov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version >=2.0.4 | — | — |
black-lamp/yii2-seo Version 0.1.* | — | — |
yii2tech/ar-position Version * | — | — |
evgeniyrru/yii2-slick Version 1.0.1 | — | — |
kartik-v/yii2-widgets Version * | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.