liasica/yii2-clsms

The small dependency footprint and MIT licensing reduce integration friction. The README and release notes are useful, but they do not offset the project's prolonged inactivity and lack of security tooling.

Latest 1.1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published about 10 years ago, with no releases in the last 12 months and only four releases overall. This is strong evidence of abandonment for a package used in ongoing projects.

Repo commit activity

The repository has had no commits and no active maintainers in the last three months, consistent with the long release gap and leaving little evidence of current maintenance capacity.

Repo popularity

The repository has one star, no forks, and no watchers, providing little supporting evidence of broad review or community adoption. Popularity is only supporting evidence and does not decide the assessment.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a hygiene gap rather than a severe risk on its own.

Repository archived

The repository is not archived, which is a positive sign, but its last push was about 10 years ago and does not compensate for the absence of recent maintenance.