Package Health/jc-it/yii2-password-input

jc-it/yii2-password-input

The repository is correctly linked, licensed, documented, and backed by an organization, with no install-time scripts. Its stable single release has had no updates since January 2022, so pinning it is safer than expecting active support.

Latest v1.0.0

Packagist

57%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published in January 2022, and none in the past 12 months. That long absence of releases is a meaningful maintenance concern.

Repo commit activity

There were no commits and no active maintainers in the three months measured. Combined with the single-release history, this indicates that active maintenance has stopped or is very limited.

Repo tooling

The repository uses Composer for its build process, but no security scanning tool is reported. The missing scanner is a modest transparency gap rather than evidence of unsafe code.

Security policy

The repository has no security policy. For a small UI extension this is a limited governance gap, but it reduces clarity about how vulnerabilities would be reported.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. All four action references are unpinned, leaving a reproducibility and update-integrity weakness.