mspirkov/yii2-db

Documentation and release notes make the change easy to understand, while the small dependency footprint keeps integration straightforward. The limited security process adds modest uncertainty for long-term adoption.

Latest 0.3.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual rather than an organization, so the single-maintainer concentration is not visibly buffered by organizational backing.

Repo bus factor

One contributor made 100% of the 20 recent commits, leaving the project dependent on a single active maintainer and increasing continuity risk.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving an avoidable security-process gap.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stability

Version 0.3.1 is not a stable major release, so compatibility expectations are lower than for a 1.x package, although it is not a prerelease and recent releases are consistent.