melkov/yiix-libs

The single-maintainer project has no tests or security policy, and its documentation is only a 30-character README. Its MIT declaration and direct repository match help, but this is a poor long-term dependency choice.

Latest 0.1.1

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in over 9 years: its latest release was June 2017, despite having three releases overall. This is strong evidence of abandonment for a library dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, with its last push in June 2017. This indicates maintenance has effectively stopped.

Maintainers

Only one registry maintainer is listed, and project_backing identifies the repository owner as an individual rather than an organization. That leaves limited visible continuity if the maintainer becomes unavailable.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. This is a modest hygiene gap that compounds the lack of maintenance evidence.

Security policy

The linked repository has no security policy, leaving no documented channel or process for handling vulnerabilities. This adds transparency risk for a library containing application and database-related components.