lesha724/yii2-youtube-widget
The package is small and straightforward, with clear usage instructions, a matching source repository, MIT licensing, and no install scripts. Its single-maintainer project has limited tooling and no security policy, leaving little evidence of ongoing support.
42%
Total Score
25
100
81
75
Health Score Breakdown
The latest release was about 9 years ago, and there have been no releases in the last 12 months. This is strong evidence of abandonment for a package whose consumers may need compatibility fixes.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the last push being about 8 years ago. The stable, narrow scope may explain low activity, but does not compensate for such a long silence.
One registry maintainer is consistent with a small user-owned project, but it leaves little contributor redundancy if the maintainer stops responding.
Composer is used for the build, which is appropriate, but no security-scanning tooling is present. This modestly reduces confidence in ongoing maintenance hygiene.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, although the package's small widget scope limits its weight.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 lesha724 |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version * | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.