Package Health/codiverum/yii2-relation-search-filter

codiverum/yii2-relation-search-filter

The BSD license files are present, but the declared and detected versions differ. The small, focused package has clear usage documentation and minimal dependencies, but lacks a security policy.

Latest 1.0.7

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in October 2015, and there have been no releases in about 11 years. This is strong evidence of abandonment risk for a dependency, despite the package having a stable release history before then.

License

A license file is present, but the manifest declares BSD-4-Clause while the artifact license file is detected as BSD-3-Clause. The package is licensed, yet the mismatch creates avoidable legal uncertainty.

Repo issue activity

There has been no new or closed issue or pull-request activity in the last month, and one issue remains open. This is consistent with the long period of inactivity and adds to maintenance concern.

Repo tooling

The repository uses Composer build tooling, but no security scanning tools are reported. The missing scanning is a modest transparency gap rather than a severe risk for this small package.

Security policy

The repository has no security policy. For a small, long-inactive library this weakens vulnerability-reporting transparency, although it is less significant than the maintenance gap.