Package Health

kv4nt/yii2-sweet-alert

The six-file package includes a usable README and has no install-time scripts or archived repository. Its dependency set is small, but the single-person project has no recent activity or security policy.

Latest v1.0.1PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

70

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package has had only two releases, both in September 2017, with no releases in the last 12 months. This is strong evidence of abandonment for a maintained dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the unchanged release history and increasing maintenance risk.

Licensecaution

The package declares MIT and includes license files, but artifact detection also identifies GPL-3.0. The additional detected license creates an unresolved licensing ambiguity.

Maintainerscaution

Only one registry account has publishing access. With no organization backing and no recent activity, this leaves the package dependent on a very thin maintainer base.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although the small, inactive codebase limits its weight relative to the maintenance concerns.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Victor Shumeyko

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version *
—
—
yiisoft/yii2-bootstrap
Version *
—
—
bower-asset/bootstrap-sweetalert
Version *
—
—

Weekly Downloads

Info

Last Published
9 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform