fedemotta/yii2-gridstack

The small seven-file codebase is easy to inspect, and the package has a clear README, matching repository, MIT license, and release notes. Its old frontend dependencies and lack of security tooling add little assurance for a modern application.

Latest v1.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases, all concentrated between April 29 and May 4, 2015, with no release in more than 11 years. This strongly indicates abandonment despite the stable version label.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push in 2017 and a long period without maintenance.

Dependency profile

The package declares five runtime dependencies, including Yii2, jQuery UI, Lodash, and Gridstack, which increases compatibility and upkeep exposure for an old integration package.

Package scaffolding

The package includes a README and release notes for this version, while the absence of tests and a changelog in the published artifact is normal packaging practice. Repository-level test and changelog support are absent, leaving limited maintenance evidence.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Federico Nicolás Motta

Direct Dependencies

Dependency	Last Release	Score
yiisoft/yii2 Version *	—	—
bower-asset/jquery Version >= 1.11.0	—	—
bower-asset/lodash Version >= 3.5.0	—	—
bower-asset/gridstack Version @dev	—	—
bower-asset/jquery-ui Version >= 1.11.0	—	—