Package Health/alexeevdv/yii2-single-file-upload

alexeevdv/yii2-single-file-upload

The package is small, clearly matched to its repository, and has a declared MIT license with no install-time scripts. Its lack of tests, security tooling, and ongoing project activity leaves maintenance and future compatibility uncertain.

Latest 1.0.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

There has been only one release, published in August 2017, with no releases in the following nine years. This is strong evidence of abandonment risk for a dependency that may need compatibility updates.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, consistent with its last push being in August 2017. No provided signal shows compensating maintenance activity.

Package scaffolding

The artifact includes a README, which is positive for basic consumer guidance, but it has no tests or changelog. The missing tests are a maintenance gap for a library, while the missing changelog is less important for a one-release package.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no evidence of a wider community capable of sustaining the package.

Repo tooling

Composer is used for the build, providing basic packaging structure, but no security-scanning tooling is present. This weakens transparency around ongoing dependency and source risks.