hoksilato/yii2-curl

Its README and small dependency surface make integration straightforward. The single-maintainer, no-test project has no security policy or scanning, adding long-term upkeep concerns.

Latest 1.0.7

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest of seven releases was published in December 2015, with no releases in the last 12 months. This long period without updates is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nine-year release gap.

Maintainers

Only one registry account has publish access. That is a thin publishing base for a package with no recent activity, though it does not by itself prove the project is abandoned.

Repo popularity

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these figures provide no meaningful community-maintenance cushion.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. This leaves supply-chain and dependency issues less likely to be detected during maintenance.