execut/yii2-composer-release-command
Its Apache-2.0 license, clear README, and single runtime dependency make it easy to inspect and integrate. The tiny project has no security policy or automated workflow, limiting evidence of ongoing maintenance.
40%
Total Score
0
100
67
75
Health Score Breakdown
Only two releases exist, with the latest published over six years ago and none in the last 12 months. This is strong evidence that the package is no longer actively maintained.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the release gap and increasing abandonment risk.
The repository has only 1 star and 1 fork, providing little supporting evidence of broad review or community maintenance. Low popularity alone is not disqualifying for a small package.
The repository is not archived, which is a modest compensating signal, but its last push was over six years ago and does not offset the prolonged inactivity.
No security policy was found in the linked repository, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, though less serious than the maintenance inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Yuriy Mamaev |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version @dev | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.