Package Health

hiqdev/hisite

The repository is licensed, documented, tested, and correctly tied to this package. Organization backing and a recent repository push provide some continuity, but the published package is very old and has no security policy.

Latest 0.1.0PackagistPackagist

60%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package has had only 4 releases, all with the latest in April 2017 and none in the last 12 months. This is a substantial maintenance concern despite the repository being updated more recently.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers during the last 3 months. Combined with the stale registry release history, this leaves current maintenance capacity uncertain.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a web-application base package, this reduces transparency around vulnerability reporting and response.

Version stabilitycaution

Version 0.1.0 is not a stable major release, which adds compatibility uncertainty for a base Yii2 project. It is not marked as a prerelease, so this is a moderate rather than severe concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Andrii Vasyliev
Dmitry Naumenko
Andrey Klochok
Yuriy Myronchuk

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version ^2.0
—
—
vlucas/phpdotenv
Version ^2.4
—
—
hiqdev/yii2-menus
Version <2.0 || dev-master
—
—
hiqdev/hidev-webapp
Version <2.0 || dev-master
—
—
hiqdev/yii2-thememanager
Version <2.0 || dev-master
—
—

Weekly Downloads

Info

Last Published
9 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform