doris/yii2-upload-file
The README, matching source tree, MIT declaration, and lack of install scripts improve transparency. A small dependency set and stable version help, but the project offers no security policy or scanning evidence.
45%
Total Score
38
100
78
88
Health Score Breakdown
This is the only release, published in February 2022, with no releases in the last 12 months. The long period without a new release raises abandonment concerns for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the sole 2022 release, this is strong evidence of inactive maintenance.
One registry publisher account, Doris Agency, is consistent with the repository being owned by the matching Doris project, but it provides limited visible publishing redundancy.
The registry namespace and repository owner correspond to the same named project, but the owner is an individual account rather than an organization, providing limited visible backing.
There were no new or merged pull requests and no issue activity in the measured month. This is consistent with the broader inactivity signal, though the open issue count is unknown.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Doris Agency |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ~2.0.0 | — | — |
yiisoft/yii2-imagine Version ^2.1 | — | — |
2amigos/yii2-file-upload-widget Version ~1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.