kesha-dev/yii2-thumbnail

The package is small and straightforward, with only two runtime dependencies and no install-time scripts. Its limited maintenance history and lack of tests, README, security policy, or recent repository activity leave less evidence for long-term support.

Latest 1.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact has no README, tests, or changelog, while the repository also reports no tests or changelog. Missing tests and changelog are not expected in every published artifact, but the absent README is a real documentation gap for a library consumers must integrate.

Project backing

The registry namespace and repository owner match a personal user account rather than an organization. That is consistent ownership, but it provides a thinner backing structure for long-term continuity.

Release history

This is the only release, published about 14 months ago, with no releases in the last 12 months. That limited history provides little evidence of sustained maintenance, though it does not by itself show abandonment.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the single-release history, this raises concern about ongoing support.

Repo popularity

The repository has zero stars and one fork. Popularity is only supporting evidence, but these counts provide little external evidence of review or adoption.