Package Health

extpoint/yii2-core

Risky to adopt: the package has had no release in nearly seven years and its repository has been inactive for more than six years. It is licensed, non-deprecated, and clearly backed by a matching organization repository, but maintenance appears effectively abandoned.

Latest 3.0.0.alpha.6PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package has 88 releases, but none in the last 12 months; the latest release was published in November 2019, nearly seven years before this assessment. The historical release count shows prior activity but does not offset the prolonged gap.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the latest push having occurred in March 2020. This is strong evidence of prolonged maintenance inactivity.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 3 watchers, so there is little visible community adoption to provide additional maintenance or continuity support.

Repository archivedcaution

The repository is not formally archived, which is a compensating signal, but its last push was in March 2020 and the recent commit activity is absent. The lack of archival status does not demonstrate active maintenance.

Security policycaution

The repository has no security policy. This is a transparency gap, though it is secondary to the much stronger concern that maintenance has stopped.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version *
extpoint/yii2-file
Version ^1.0
arogachev/yii2-many-to-many
Version ^0.2.1
bariew/yii2-module-migration-controller
Version *

Weekly Downloads

Info

Last Published
7 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform