dpodium/yii2-nexmo

The repository’s GPL-3.0 license conflicts with the package’s BSD declaration, and it has no security policy. An organization owns the repository and the package includes a usable README, but that does not offset the long maintenance gap.

Latest 1.3

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in May 2017, with no releases in the last 12 months. This is a substantial abandonment risk despite 13 historical releases.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with a project that has been inactive for years.

License

The package declares BSD, while the repository license file was detected as GPL-3.0. This mismatch creates a material licensing and transparency concern for adopters.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and one pull request remains open. This provides no evidence of active maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. That weakens maintenance hygiene for a package with no recent activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Sionghuat Chng

Direct Dependencies

Dependency	Last Release	Score
yiisoft/yii2 Version 2.0.*	—	—
php-http/guzzle6-adapter Version ^1.0	—	—
zendframework/zend-diactoros Version ^1.3	—	—
php-http/client-implementation Version ^1.0	—	—