idlesign/ist-yii-cfile

The package includes a clear README, tests, changelog, MIT license, and minimal runtime dependencies. It has no security policy, and its old PHP/Yii requirements may limit compatibility with modern projects.

Latest v1.0.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has had only one release, published about 13 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk despite the repository remaining available.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with the old last push, this materially increases the risk that defects and compatibility issues will remain unresolved.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with two issues still open. This is consistent with an inactive project, though issue volume is small.

Repo tooling

Composer is used for build or package tooling, which supports reproducible project setup, but no security scanning tool is configured. This is a modest transparency gap rather than a severe risk.

Repository archived

The repository is not archived, which is a positive sign, but its last push was about 9 years ago and therefore does not demonstrate active maintenance.