nabu/yii2-compressr
The package is clearly licensed and includes a useful README for integration. Its small footprint and lack of security tooling provide limited evidence of mature engineering practices.
40%
Total Score
58
50
Health Score Breakdown
The package has had four releases, all clustered around its November 2020 launch, with no releases in roughly five years and nine months. That strongly increases abandonment risk.
The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these counters provide no supporting evidence of active community use.
Composer is used for builds, but no security-scanning tooling is present. This is a transparency and maintenance gap for a package with a long inactive history.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in an asset-processing extension.
The latest release is still below 1.0, which is a modest maturity concern for a package that has otherwise seen no updates since its initial release.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nabu Software |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ^2 | — | — |
mrclay/minify Version ^3.0.3 | — | — |
tedivm/jshrink Version ^1.3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.