Package Health/cdev38399/yii2-shopping-cart-private

cdev38399/yii2-shopping-cart-private

The package has a clear BSD-3-Clause license, a usable README, and a small dependency surface. It lacks tests, security scanning, and evidence of a broader support base, so future fixes are uncertain.

Latest 1.2.5

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The last release was published in March 2016, roughly 10 years ago, and there have been no releases in the last 12 months. That is strong evidence of abandonment for a library consumers may need to maintain.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap. No provided signal shows compensating maintenance activity.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher, offering little supporting evidence of community adoption or review. Low popularity alone is not decisive, but it reinforces the maintenance concern here.

Repo tooling

Composer is used for the build, but no security-scanning tool is configured. The absence of scanning modestly reduces supply-chain and maintenance transparency.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though not severe on its own.