Package Health

chemezov/yii2-yandex-cloud

It has clear installation documentation, a matching source repository, an MIT license, and no install-time scripts. Its small project footprint and lack of security scanning add little assurance for future maintenance.

Latest v3.0.0PackagistPackagist

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package has had no releases in the last 12 months, and its latest release was in June 2019 despite being over seven years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited maintenance capacity.

Project backingcaution

The package and repository are owned by the same individual account, so there is no organizational backing shown to compensate for the thin maintenance history.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. The missing scanning is a minor transparency gap rather than evidence of abandonment by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a modest transparency gap for a package handling cloud credentials and storage access.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Constantine Chuprik
Ivan Kudinov

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version ~2.0
—
—
aws/aws-sdk-php
Version ~3.17
—
—

Weekly Downloads

Info

Last Published
7 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform