kartik-v/yii2-social

The package has a clear BSD-3-Clause license, a substantial README, and release notes for this version. Its small dependency set and matching source repository provide useful transparency, but they do not offset the maintenance concerns.

Latest v1.3.5

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest registry release was 21-Sep-2018, with no releases in the last 12 months. An eight-year release gap is strong evidence of abandonment risk for a library dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old release, this indicates a project with little current maintenance capacity.

Project backing

The registry namespace and repository owner match, and the repository is owned by a user rather than an organization. The matching ownership supports provenance, while the single-person backing leaves limited visible redundancy.

Repo issue activity

There is only one open issue and no issue or pull-request activity in the last month. The low issue count is not concerning by itself, but the absence of recent activity reinforces the maintenance concern.

Repo tooling

Composer is used for the build, but no security-scanning tools were detected. The missing scanning is a hygiene gap rather than proof of unsafe code.