Package Health/muravshchyk/yii2-pwstrength-widget

muravshchyk/yii2-pwstrength-widget

The repository is a very small six-file widget with no tests, changelog, or README, limiting transparency and maintenance evidence. It is not deprecated or archived, and its dependency profile is simple, but the long period without activity remains the main concern.

Latest 1.0.1.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in February 2017, with no releases in the last 12 months and only three releases overall. This strongly raises abandonment risk for a dependency, despite the package reaching a stable major version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since 2017. The lack of recent maintenance is a substantial dependency risk.

Package scaffolding

The artifact has no README, tests, or changelog, while the repository also has no tests or changelog. These gaps reduce transparency for a library widget, although the GitHub release mechanism provides some release structure.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these very low adoption signals provide little evidence of active community support.

Repo tooling

Composer is used as a build tool, which is appropriate for this PHP package, but no security scanning tools are present. This is a modest hygiene gap rather than a standalone dependency blocker.