nerburish/yii2-thread

The package is small and easy to inspect, with a clear README, MIT declaration, and one runtime dependency. Its missing security policy and very limited repository activity leave maintenance and long-term support uncertain.

Latest 1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published in April 2017, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency released nearly nine years ago.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in 2017. No provided maintenance signal compensates for this prolonged inactivity.

Repo popularity

The repository has one star, no forks, and one watcher. Low popularity is supporting evidence of limited adoption and oversight, though it does not establish a problem by itself.

Repo tooling

Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a modest hygiene concern rather than a standalone dependency blocker.

Security policy

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the much stronger evidence of long-term inactivity.