Package Health

asbsoft/yii2-common_2_170212

The clear license, readable documentation, and matching source repository improve transparency. Nearly eight years without a release or recent commits, alongside minimal community activity, makes future fixes uncertain; pin this version only if you can maintain it yourself.

Latest 2.14.8PackagistPackagist

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has had no release in nearly eight years, despite 32 releases overall; its earlier release cadence does not compensate for the prolonged current inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the prolonged maintenance gap.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little evidence of an active user or contributor community to support ongoing maintenance.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. That is a modest supply-chain hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear; this adds a transparency gap to the maintenance concerns.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Alexandr Belogolovsky

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version ~2.0.10
—
—
yiisoft/yii2-jui
Version ~2.0.4
—
—
yiisoft/yii2-imagine
Version 2.*
—
—
mihaildev/yii2-ckeditor
Version *
—
—
mihaildev/yii2-elfinder
Version *
—
—

Weekly Downloads

Info

Last Published
7 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform