alexandernst/yii2-scrypt

The package has a clear README, matching repository, and GPL-3.0 license. Its single runtime dependency and lack of install scripts limit complexity, but it has no tests or security scanning.

Latest 0.0.4

Packagist

34%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in April 2015, and there have been no releases in more than 11 years. This strongly indicates abandonment risk despite the package not being deprecated.

Repo commit activity

The repository has had zero commits and zero active maintainers in the last three months, consistent with the long release gap and offering no evidence of ongoing maintenance.

Repo popularity

The repository has one star and no forks, providing little evidence of community review or adoption. Popularity is supporting evidence only, but it reinforces the limited maintenance signal.

Repo tooling

Composer is used for the build, but the repository has no security scanning tools. The missing scanning is a modest hygiene gap, especially for an inactive package.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This matters more because no recent maintenance activity is visible.