justyork/cms

The package includes a README, tests, changelog, and a clear source repository, which improve transparency. Its licensing text is inconsistent, and the project lacks security scanning and a security policy.

Latest 0.4

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in October 2017, with no releases in the past 12 months; nearly nine years without a release is strong abandonment evidence.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap and leaving current maintenance capacity un demonstrated.

License

The artifact declares BSD-3-Clause but its detected license file is MIT. Although license files exist in both the artifact and repository, this mismatch requires clarification before adoption.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide no meaningful community backing to offset the inactivity.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. This is a hygiene and vulnerability-management gap, not evidence that the package is unsafe by itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
yiisoft/yii2 Version ~2.0.6	—	—
yiisoft/yii2-imagine Version ^2.1	—	—
yiisoft/yii2-bootstrap Version ~2.0.0	—	—
yiisoft/yii2-swiftmailer Version ~2.0.0	—	—
2amigos/yii2-tinymce-widget Version ^1.1	—	—