mrlco/yii2-google-charts

The package has a clear GPL-3.0 license, a matching repository, and a small dependency surface. No install scripts or workflow risks are present, but the limited documentation and absent security policy reduce transparency.

Latest 1.0.1

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published over 10 years ago, with no releases in the last 12 months. That provides strong evidence of abandonment risk despite the stable 1.0.1 version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release inactivity. No provided signal shows compensating maintenance activity.

Repo issue activity

There is one open issue and no new or closed issues or pull requests in the last month. This indicates little current project activity, though the small package scope limits how much issue volume would be expected.

Repo popularity

The repository has only 3 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these low figures provide little evidence of a broad support community.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, but it is less serious than the prolonged lack of maintenance.