andkon/yii2socket-chat

Its dependency surface is small, and the repository clearly matches the package. The project has had no commits or releases since September 2016, while the README calls it unstable and the proprietary license limits transparency and reuse.

Latest 0.2.1b

Packagist

30%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. That creates a material transparency and adoption concern for an open-source dependency.

Release history

The package has had no release in nearly 10 years, with zero releases in the last 12 months; this is strong evidence of abandonment despite its seven historical releases.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, and the repository was last pushed in September 2016; the long inactivity outweighs the repository's non-archived status.

Package scaffolding

A README is present and explicitly warns that the chat is still in development and unstable. The absence of tests and a changelog is normal for a published artifact and is not penalized here.

Repo tooling

The project uses Composer, which supports reproducible package management, but it has no security scanning tooling. This is a secondary hygiene gap alongside the much stronger maintenance concerns.