atans/yii2-history

The README, MIT declaration, and single runtime dependency make the small package straightforward to adopt. Its last release and repository activity were about 9 years ago, with only 1 star and no security policy, leaving substantial abandonment and transparency concerns.

Latest 1.0.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 2 releases, and its latest release was about 9 years ago; no releases occurred in the last 12 months. This is strong evidence of abandonment risk despite the stable version.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. No newer maintenance activity is visible to compensate for that stagnation.

Repo popularity

The repository has 1 star, 0 forks, and 2 watchers, providing little evidence of community adoption or external maintenance support. Low popularity alone is not disqualifying, but it reinforces the abandonment concern here.

Repo tooling

The repository uses Composer build tooling, which fits the package ecosystem. No security scanning tools are present, but this is secondary to the more significant maintenance concerns.

Security policy

The repository has no security policy. For a package that records application history, this reduces transparency about vulnerability reporting and response, and no other provided signal compensates for the gap.