Package Health

dmitriikoziuk/yii2-shop

The repository has tests and the release is clearly licensed, which support adoption. One maintainer, minimal project interest, and no security policy leave little visible support for a mature library.

Latest 0.4.19PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has 36 releases, but its latest release was in February 2020 and it had no releases in the last 12 months. This indicates a long maintenance gap despite earlier release activity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history's extended inactivity and increasing abandonment risk.

Maintainerscaution

Only one registry maintainer is listed, leaving the package dependent on a single publisher. The linked repository is user-owned rather than organization-backed, so no broader backing is evident.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher, providing very little evidence of community use or outside support. Popularity is supporting evidence, but this reinforces the maintenance concerns.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a hygiene gap that adds to the limited maintenance evidence, though it is not severe by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Dmitrii Koziuk

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version ~2.0.0
—
—
yiisoft/yii2-queue
Version ^2.3
—
—
yiisoft/yii2-bootstrap
Version ~2.0.0
—
—
dmitriikoziuk/yii2-base
Version ~0.3.0
—
—
yiisoft/yii2-bootstrap4
Version ~2.0.6
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform