nineinchnick/yii2-audit

Its MIT license, readable documentation, and matching repository improve transparency. The absence of tests and security tooling leaves maintenance and change safety less reassuring.

Latest v1.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published nearly 11 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a framework extension.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the nearly 11-year gap since the last release. This materially lowers confidence in ongoing maintenance.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and one issue remains open. This provides no evidence of current maintenance or responsiveness.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The long period without maintenance makes this gap more consequential.