hardsetting/yii2-mongodb

It has a clear BSD-3-Clause license, documentation, repository tests, and a small dependency set. The source has had no commits for over 10 years and no releases since January 2016, making current compatibility fixes unlikely.

Latest 2.0.6

Packagist

32%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has made no release in over 10 years, with zero releases in the last 12 months. Although it has nine historical releases, the long-term absence of updates is a substantial maintenance concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the last push being in January 2016. This leaves little evidence of ongoing fixes or compatibility work.

Repo tooling

Composer is used for builds, but no security scanning tools are present. The missing scanning is a secondary hygiene gap and does not outweigh the much stronger abandonment evidence.

Security policy

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This is a transparency gap, though the package's long inactivity is the larger concern.