Package Health/lanfix/yii2-redis-pub-sub

lanfix/yii2-redis-pub-sub

The tiny four-file project offers little evidence of ongoing maintenance or security oversight. Its MIT license, matching repository, and simple three-dependency profile are reassuring, but they do not offset the long period of inactivity.

Latest 0.1.3

Packagist

46%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only four releases were published, all clustered in April 2020, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency released over six years ago.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since April 2020.

Repo popularity

The repository has zero stars, forks, and watchers, providing no community adoption evidence. Popularity is only supporting evidence, so this modestly reinforces—but does not establish—the maintenance concern.

Repo tooling

Composer is used for builds, but no security-scanning tool was detected. For a small library this is a modest transparency and oversight gap, not evidence of unsafe behavior by itself.

Security policy

The repository has no published security policy, leaving reporting and response expectations unclear. This adds a modest transparency concern alongside the stronger maintenance concern.