Package Health/ispomazkin/yii2-chevrolet

ispomazkin/yii2-chevrolet

The package has a clear README, matching repository, MIT license, and only two runtime dependencies. Its release and commit activity stopped years ago, with no recent issue resolution or security policy, so future compatibility and maintenance support are uncertain.

Latest 1.81

Packagist

35%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in the last 12 months, and its latest release was about seven years ago despite 14 releases overall. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the repository having been inactive for about six years. This materially raises the risk that defects and compatibility changes will go unanswered.

Project backing

The package and repository are owned by the same individual account rather than an organization. This is consistent ownership, but it indicates a limited backing structure when combined with the absence of recent activity.

Repo issue activity

There were no new or closed issues in the last month and one open pull request remains. The low volume is not harmful by itself, but the lack of recent resolution adds to the maintenance concern.

Repo tooling

The project uses Composer, which fits the package ecosystem, but no security scanning tools were detected. That weakens maintenance transparency, though it is secondary to the long inactivity.