Package Health

maxodrom/yii2-social

The project has had no releases since May 2017 and no commits or active maintainers in the last three months. A clear license, useful README, matching repository, and non-archived source reduce transparency concerns, but do not offset the abandonment risk.

Latest v1.3.3PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package is about 9 years old, has 7 releases, and has had no release in the last 12 months; the latest release was in May 2017. This is strong evidence of abandonment for a library that may need compatibility updates.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, providing no evidence of current maintenance capacity. This reinforces the long release gap.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, offering little supporting evidence of an active user or contributor community. Popularity is secondary, but these values add to the maintenance concern.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is less significant than the sustained lack of maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kartik Visweswaran

Direct Dependencies

DependencyLast ReleaseScore
facebook/graph-sdk
Version ~5.0
kartik-v/yii2-krajee-base
Version ~1.7

Weekly Downloads

Info

Last Published
9 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform