Package Health

gustarus/yii2-activerecord

The MIT license and lack of install scripts reduce immediate friction. However, the four-file project has no tests, no security policy, and no security scanning, while repository activity has stopped since 2019. Its single maintainer and negligible adoption evidence add further uncertainty.

Latest 1.0.3PackagistPackagist

39%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

57

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has made no release in the last 12 months, and its latest release was about 7 years ago. This is strong evidence of abandonment for a library dependency.

Maintainerscaution

Only one registry maintainer is listed. The repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy if that maintainer becomes unavailable.

Package scaffoldingcaution

A README is present, but it is only 66 characters and the package contains no tests. Missing tests are normal in the published artifact, while the very limited consumer documentation is a modest transparency gap.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month. Combined with the long release gap, this supports a conclusion of inactive maintenance.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these counts provide no additional maturity or community signal.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Pavel Kondratenko

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version ^2.0.0
—
—
yiisoft/yii2-bootstrap
Version ^2.0.0
—
—

Weekly Downloads

Info

Last Published
7 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform