carono/yii2-1c-exchange

The package includes a substantial README, changelog, matching source repository, and a small runtime dependency set. Its registry release is old and recent repository activity is absent, while no security policy or automated security scanning is provided.

Latest 0.3.1

Packagist

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in September 2020, with no releases in the last 12 months despite a 13-release history. This materially raises maintenance and abandonment concerns.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with the old registry release, this is strong evidence of currently inactive maintenance.

Project backing

The package and repository are owned by the same individual account rather than an organization. That is consistent ownership, but it indicates a limited formal backing structure.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while five issues and two pull requests remain open. This suggests limited ongoing project response.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.