life2016/yii2-webuploader
The small repository has no security policy and only four stars, limiting confidence in ongoing support. A README and minimal runtime dependencies help adoption, but they do not offset the long maintenance gap.
38%
Total Score
0
100
75
75
Health Score Breakdown
The latest release was published in November 2016, with no releases in the last 12 months; the package has been without a release for nearly 10 years. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the nearly 10-year release gap and indicating no current maintenance capacity.
Neither the package nor the linked repository declares or contains a recognized license. This creates a real adoption and transparency concern for a dependency.
The repository has only 4 stars, 1 fork, and 1 watcher. Low popularity is supporting evidence rather than decisive on its own, but it provides little sign of a broader maintenance community.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a meaningful transparency gap for a package handling file uploads.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.