Package Health/lav45/yii2-activity-logger

lav45/yii2-activity-logger

The repository has had no commits from any active maintainer in the last three months, and all five workflow actions are unpinned. A recent release, clear licensing, tests in the repository, and a matching source project provide useful support, but ongoing maintenance remains uncertain.

Latest 2.3.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. The recent release and push show some current activity, but the short-term development pause raises maintenance concerns.

Repo issue activity

There are only three open issues and no open pull requests, but there was no issue or pull-request activity in the last month, offering limited evidence of active support.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected, leaving repository security hygiene less demonstrable.

Security policy

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Workflow audit

Both workflows omit a top-level permissions block, which is acceptable on its own, but all five analyzed action references are unpinned, weakening reproducibility and allowing referenced action code to change over time. The audit completed fully and found no trigger or injection issues.