Package Health/phucnguyenvn/yii2-evecalendar

phucnguyenvn/yii2-evecalendar

The project has had no release in more than nine years, with only three releases and very little repository activity. A README, release notes, declared license, and no install scripts help, but the tiny project footprint and absent security controls increase maintenance risk.

Latest 1.0.2

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was over nine years ago, with three releases total and none in the last 12 months. This is strong evidence of abandonment risk despite the earlier roughly two-month release interval.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is consistent with a dormant project, although the zero backlog is not itself a defect.

Repo popularity

The repository has 3 stars, 1 fork, and 1 watcher, providing little evidence of broad community review or a durable user base. Low popularity alone is supporting evidence, but it reinforces the maintenance concern here.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This is a transparency and maintenance gap, though it is less serious than the long period without releases.

Security policy

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities in a package that has been inactive for years.