Package Health/ereminmdev/yii2-fullcalendar6

ereminmdev/yii2-fullcalendar6

The package is small and clearly identified, with a license, readable instructions, and straightforward Composer dependencies. Its single maintainer and absent security scanning provide less evidence of long-term support.

Latest v1.0.4

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry maintainer is listed, leaving limited visible publishing capacity. The linked repository is owned by the same individual, so this is a genuine concentration risk rather than an organization-backed project with a small registry access list.

Release history

The package has only four releases and none in the last 12 months; the latest release was published about 16 months ago. This suggests a slowing maintenance cadence, though the stable version may be intentionally mature.

Repo commit activity

The repository recorded no commits and no active maintainers during the last three months. Combined with the long release gap, this weakens evidence that issues or compatibility changes will be addressed promptly.

Repo tooling

Composer is used for the build, but no security-scanning tool is configured. The missing scanner is a modest hygiene gap for a small package and is partly offset by its very small, inspectable file tree.

Security policy

The repository has no published security policy, which reduces transparency about vulnerability reporting and response expectations. This is a maintenance and process gap, not evidence of malicious behavior.