kozz/yii-xss-filter

The package is small and clearly structured, with tests, a README, and no install-time scripts. Its last release and repository activity were nearly 12 years ago, while the repository does not explicitly identify the package and its license metadata conflicts.

Latest 1.0.1

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both in October 2014, with no releases in the last 12 months; this is strong evidence of abandonment for a dependency.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the long release gap and indicating severe maintenance risk.

License

A license file is present, but the manifest declares BSD-3-Clause while the artifact license file is recognized as MIT. The package is licensed, yet the conflicting metadata reduces transparency.

Project backing

The repository is owned by an individual account rather than an organization, providing no visible organizational backing to compensate for the lack of recent activity.

Repo issue activity

There were no new or closed issues or pull requests recently. With no recent commits or releases, this looks inactive rather than efficiently maintained.