kab91/yii2-yashop-ses

The small codebase has clear installation guidance and a documented release note, but it has seen no release or commit activity for about four years. Its individual-owned project has no security scanning or policy, leaving little evidence of ongoing support.

Latest v1.0.5

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has made six releases, but none in the last 12 months; its latest release was published on January 28, 2022. This long release gap is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no meaningful activity since January 2022. This is the strongest maintenance concern for depending on the package.

Project backing

The package and repository are owned by the same individual account, with no organization backing shown. This is not inherently unsafe, but it provides a thinner apparent support base.

Repo popularity

The repository has one star and no forks or watchers. Popularity is only supporting evidence, but these numbers provide little external evidence of adoption or community support.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a hygiene gap, while the build tooling provides basic project structure.