hiqdev/yii2-thememanager
Documentation and licensing are in place, with a small runtime dependency set and organization backing. Release publishing has been quiet since June 2022, activity is concentrated in one contributor, and all three workflow actions are unpinned.
68%
Total Score
67
100
92
67
Health Score Breakdown
The package has nine releases since August 2016, but none in the last 12 months and the latest release was in June 2022. That weakens confidence in ongoing release maintenance.
All recent commits came from one contributor, so maintenance continuity depends heavily on a single active contributor. Organization ownership provides some handoff capacity but does not remove the concentration concern.
The repository recorded two commits in the last three months, showing some current activity, but the volume is modest for a maintained library.
No repository security policy was found, leaving vulnerability reporting and response expectations unspecified.
The only workflow was fully analyzed with no injection findings and no broad top-level write permissions, but all three action references are unpinned. That is a supply-chain hygiene weakness even though no higher-confidence dangerous workflow behavior was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andrii Vasyliev |
| Dmitry Naumenko |
| Andrey Klochok |
| Yuriy Myronchuk |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hiqdev/yii2-collection Version * | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.