juckzhang/yii2-upload

The README is clear, the release has notes, and the package declares a BSD-3-Clause license. Its seven runtime dependencies and lack of security tooling add maintenance burden for a small, single-owner project.

Latest 1.0.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published about 9 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk.

Repo commit activity

The repository has had zero commits and zero active maintainers in the last 3 months, consistent with its last push being about 9 years ago. No newer activity compensates for this.

Dependency profile

The package declares seven runtime dependencies spanning Yii2, cloud storage, FTP, and filesystem integrations. This broad dependency surface increases upkeep demands for a project with no recent maintenance.

Maintainers

Only one registry publishing account is listed. The repository is user-owned rather than organization-backed, so there is no provided evidence of a wider publishing or maintenance team.

Repo issue activity

There are no open issues or pull requests and no activity in the last month. This is consistent with a dormant project, although the absence of unresolved issues is not itself harmful.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

juckzhang

Direct Dependencies

Dependency	Last Release	Score
yiisoft/yii2 Version *	—	—
qiniu/php-sdk Version v7.0.7	—	—
dcb9/yii2-qiniu Version ^0.3.0	—	—
league/flysystem Version ~1.0	—	—
hguenot/yii2-gftp Version *	—	—