jp3cki/yii2-extra-validator
Clear documentation, tests, and a matching source repository reduce adoption friction. Maintenance is recent but concentrated in one contributor, with no security policy and unpinned workflow actions.
72%
Total Score
50
100
83
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the concentrated contributor activity is not offset by visible organizational backing.
All two recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.
Two commits in the last three months show recent activity, but the volume is limited and does not demonstrate a strong maintenance pace.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The sole workflow was fully audited with no dangerous triggers, sinks, or audit findings, but all 8 action references are unpinned, weakening build reproducibility and update integrity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 AIZAWA Hina |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ^2.0.55 | — | — |
jp3cki/mb_str_replace Version ^4.0.2 | — | — |
symfony/polyfill-php83 Version ^1.37 | — | — |
yiisoft/yii2-httpclient Version ^2.0.16 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.