Package Health

kolyunya/yii2-map-input-widget

Risky to adopt for a new project: the package is clearly identified, licensed, documented, and not deprecated, but it has had no release or repository commits for over eight years. That long period without maintenance is a substantial compatibility and abandonment risk.

Latest v1.2.0PackagistPackagist

48%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package has six releases, but its latest release was in January 2018 and there were no releases in the last 12 months. More than eight years without a release is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no meaningful maintenance for over eight years.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while two issues and four pull requests remain open. This suggests unresolved maintenance needs rather than active stewardship.

Repo toolingcaution

The repository uses Composer build tooling, but it has no security scanning tools. The absence of scanning is a modest hygiene gap, while the lack of recent maintenance remains the primary concern.

Repository archivedcaution

The repository is not marked archived, which avoids the strongest repository-level abandonment signal, but its last push was in March 2018 and does not offset the prolonged inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Oleynikov Nikolay

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
8 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform