devskyfly/yii-extension-calltouch
The package has a small four-file footprint, no tests, and no security scanning, while its README provides basic setup guidance. Its MIT declaration, direct Guzzle dependency, and lack of install scripts reduce adoption friction, but they do not offset the maintenance concern.
38%
Total Score
0
100
79
67
Health Score Breakdown
The latest release was in February 2019, with no releases in the last 12 months and only two releases overall. This is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
The package contains only four files, which may be reasonable for a small integration but leaves little evidence of supporting project maturity.
Composer is used as a build tool, but the repository has no security scanning tooling. That is a modest transparency and maintenance gap rather than a standalone severe risk.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ivan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version >=4.1.4 <7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.