buddysoft/yii2-widget
It has a clear MIT license, a readable package, and a modest dependency set. A single maintainer, no security policy, and limited repository activity leave weaker evidence of ongoing support.
61%
Total Score
50
100
83
75
Health Score Breakdown
The source repository is owned by an individual user rather than an organization, so the one-person publishing and maintenance structure offers limited institutional backing.
The package has 52 releases since November 2016, but none in the last 12 months and the latest release was nearly two years ago, which points to slowing maintenance.
There were no commits and no active maintainers in the last three months, weakening evidence of current support; the repository is not archived, which is only limited compensation.
The repository has zero stars, one fork, and one watcher, providing little community evidence to compensate for the thin maintenance signals.
The repository uses Composer for builds, but no security-scanning tools were detected, leaving a modest quality and transparency gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 liuwanwei |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ~2.0.14 | — | — |
nesbot/carbon Version ^3.8.0 | — | — |
mdmsoft/yii2-admin Version ~2.0 | — | — |
yiisoft/yii2-imagine Version ~2.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.