kartik-v/yii2-popover-x

The release is clearly licensed, documented, and tied to a matching source repository with a focused dependency set. However, there have been no releases or commits for more than six years, and the repository has no recent issue or pull-request activity, making future maintenance uncertain.

Latest v1.3.5

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published on 2 April 2020, with no releases in the last 12 months. This long period without a new release is strong evidence of abandonment risk, although the package has an established release history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap. The repository is not archived, but there is no observed recent maintenance to offset the inactivity.

Repo issue activity

There were no new or closed issues or pull requests in the last month and no open work. This may reflect a small, stable package, but it provides no evidence of ongoing project responsiveness.

Repo tooling

Composer is used as the build tool, but no security-scanning tool is present. The absence is a modest hygiene concern rather than evidence that the release is unsafe on its own.

Security policy

The repository has no security policy. That is a transparency and vulnerability-reporting gap, though it is secondary to the much stronger evidence from the long maintenance pause.