echotrue/yii2-markdown

The package has had no release or repository commit activity since November 2016, leaving maintenance and compatibility uncertain. It is not deprecated or archived, and it includes a README with a small dependency surface, but it has no security policy and its declared BSD license differs from the bundled MIT license file.

Latest 1.1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was on November 3, 2016, with no releases in the last 12 months and a package age of about 10 years. This is strong evidence of abandonment risk for a framework extension.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release hiatus and leaving current maintenance unverified.

License

The manifest declares BSD-2-Clause and the artifact contains a separate MIT license file for bundled CodeMirror assets. The mismatch reduces licensing clarity even though licensing material is present.

Repo popularity

The repository has one star and no forks, providing little supporting evidence of community use or review. This is secondary to the direct inactivity evidence.

Repo tooling

Composer is used for the build, but no security-scanning tooling is present. That is a modest transparency and maintenance gap, not a standalone adoption blocker.