Package Health

beeline/yii2-tiered-cache

It includes a README, tests, a clear license, and a small dependency set. The repository is not archived and uses Dependabot, but it lacks a security policy and has weak workflow pinning.

Latest 1.0.6PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

93

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This is concrete evidence that current maintenance has paused and increases abandonment risk.

Project backingcaution

The package registry namespace and repository owner are different user-owned identities, so there is no clear organization backing to compensate for the thin maintainer and inactive commit signals.

Release historycaution

Seven releases arrived within the first two days, followed by no further registry releases over roughly ten months. That burst provides some initial maturity evidence but little evidence of sustained release maintenance.

Security policycaution

No repository security policy was found. This is a transparency gap for a package that handles cache infrastructure, although it does not by itself show abandonment.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all four action references are unpinned. The lack of a top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene weakness.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Pavel Dubrovsky

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version ^2.0.45
—
—
beeline/yii2-circuit-breaker
Version ^1.0.5
—
—

Weekly Downloads

Info

Last Published
11 months ago
Created
11 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform