crisu83/yiistrap

The package is well documented, tested, licensed, and has a small runtime dependency set. Its install script and lack of security policy add operational uncertainty.

Latest 2.0.4

Packagist

44%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in January 2018, with no releases in the last 12 months. This long release gap is strong evidence of abandonment for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, corroborating the lack of recent releases rather than showing a merely stable project.

Lifecycle scripts

The package defines a post-install-cmd script, which adds installation-time behavior that consumers must account for. No evidence here shows that the script is unsafe, so this is a moderate operational concern.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 10 issues remain open. This suggests little ongoing maintenance or issue response.

Security policy

The repository has no security policy, leaving users without a documented vulnerability-reporting process. This is a transparency gap, though it is less severe than the maintenance inactivity.