Package Health/newerton/yii2-dynamicform

newerton/yii2-dynamicform

Usable with caveats: the release is stable, documented, licensed, and backed by a matching repository. However, the registry has had no new release for about 11 years, and recent repository activity consists of just one contributor and one commit, so long-term maintenance is uncertain.

Latest v2.0.2

Packagist

63%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The registry namespace and repository are owned by the same individual, which supports package identity, but there is no organization backing shown to provide maintenance redundancy.

Release history

The package has five releases, but its latest registry release was about 11 years ago and it has had no releases in the last 12 months. This is a significant maintenance concern, although the repository shows some recent activity.

Repo bus factor

All recent commits came from one contributor, leaving maintenance dependent on a single active person. The matching repository and package ownership provide identity continuity but do not materially reduce this concentration risk.

Repo commit activity

The repository recorded only one commit in the last three months from one active maintainer. This recent activity partly offsets the old registry release history but still indicates very limited ongoing maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. For this small PHP widget this is a transparency gap rather than a severe health risk.