codewen2018/yii2-qiniu

The package has a short README, a valid MIT declaration, and a repository that matches the package. Its sole release and last commit were in December 2017, while the three-file project has no tests, security policy, or security scanning, leaving maintenance and compatibility unverified.

Latest v1.0.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

There has been only one release, published in December 2017, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency with potentially changing platform integrations.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and providing no evidence of current maintenance.

Package file tree

The published artifact and repository each contain only three files: Qiniu.php, README.md, and composer.json. This may be sufficient for a small wrapper, but it provides little visible project structure for testing or long-term maintenance.

Repo popularity

The repository has one star and no forks, offering little community evidence or backup support. Popularity is only supporting evidence, but this reinforces the lack of maintenance signals.

Repo tooling

Composer is used as the build or dependency tool, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than proof of unsafe code.