Package Health/matrozov/yii2-nested-field-validation

matrozov/yii2-nested-field-validation

The package is small, clearly documented, and has a straightforward dependency footprint. Its limited project activity and lack of security tooling make long-term maintenance less reassuring.

Latest 1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual account, and the repository is not presented as organization-backed. That is consistent ownership, but it also indicates a narrow maintainer base.

Release history

This is the only release, published 771 days ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance, despite the package remaining available and not deprecated.

Repo commit activity

There were zero commits and zero active maintainers during the last three months. Combined with the one-release history, this is meaningful evidence of limited ongoing maintenance.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little external evidence of maturity or community support.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a small PHP library this is a hygiene gap, not a severe supply-chain concern.