culture-pn-psu/yii2-menu

The package has a usable README, a declared GPL-3.0 license, and no install-time scripts. Its tiny audience, absent security policy, and lack of tests leave little evidence of ongoing care.

Latest 1.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

There has been only one release, published in July 2017, with no releases in the last 12 months. This is strong evidence of a long-stalled project and materially raises abandonment risk.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since 2017. This substantially increases abandonment risk.

Package scaffolding

The package includes a README, giving consumers basic installation and usage guidance. Tests and a changelog are absent, but those are expected to live in the repository rather than the published artifact; the repository also reports no tests or changelog.

Repo popularity

The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but this offers little external adoption or review signal.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a hygiene gap rather than proof of unsafe code.