alex290/yii2-treeselect

The package is small, clearly documented, and has a minimal runtime dependency with no install-time scripts. Its maintenance capacity is uncertain because the single-user project has had no recent activity or release, and it lacks a security policy.

Latest 1.0.3

Packagist

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

One registry account publishes the package, which is a narrow publishing base. The linked repository is also owned by that individual, so there is no organizational backing shown to offset the limited maintainer capacity.

Project backing

The repository is owned by the same individual named in the package namespace, providing consistent ownership context but no broader organization backing.

Release history

The latest release was about four years ago, with no releases in the last 12 months and only three releases overall. This suggests limited ongoing maintenance, although the stable 1.0.3 release may be sufficient for a small utility.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates that fixes may not arrive promptly.

Security policy

The repository has no security policy. For a small package this is a modest transparency gap, but it makes the process for reporting and coordinating fixes unclear.