execut/yii2-files

The Apache-2.0 license, matching source repository, and absence of install-time scripts provide useful baseline transparency. Consumer documentation is missing, and the repository has no security policy, which adds smaller maintenance and transparency concerns.

Latest 0.6.13

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in December 2021, with no releases in the last 12 months despite 29 releases overall. This long release gap is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's multi-year release gap and indicating no observable current maintenance.

Package scaffolding

The artifact has no README, while tests and a changelog are not expected in published package artifacts; missing consumer documentation is a modest usability and transparency gap for this library.

Repo popularity

The repository has zero stars, one fork, and one watcher, offering little supporting evidence of broad community review or adoption. Popularity is secondary, so this reinforces rather than determines the maintenance concern.

Security policy

The linked repository has no security policy. This is a smaller transparency weakness, especially for a package that may handle application files, but it is not evidence of a security defect by itself.