Package Health

claudejanz/yii2-moment

asset loader for moment.js

Latest v1.0PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has only one release, published about 8 years and 10 months ago, with no releases in the last 12 months. This is strong evidence of an abandoned release line, despite the package being small and stable.

Dependency profilecaution

The package declares four runtime dependencies, including Yii2, Yii2 JUI, and the Moment asset. This is a modest dependency surface for an asset-loader extension, though each dependency adds compatibility maintenance risk to an old release.

Project backingcaution

The repository is owned by the same individual account as the registry namespace, providing direct ownership alignment but no organizational backing. The single-person project structure offers limited maintenance capacity.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month. Combined with the old last push and single release, this supports the conclusion that the project is inactive.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of community review or a broader maintenance base. Low popularity is supporting evidence rather than a verdict on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

claudejanz

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version *
—
—
yiisoft/yii2-jui
Version *
—
—
bower-asset/moment
Version >=2.9
—
—

Weekly Downloads

Info

Last Published
8 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform