Package Health/prokhonenkov/yii2-sitemap-generator

prokhonenkov/yii2-sitemap-generator

The package is clearly documented and licensed, with a focused dependency set and no install-time scripts. Its maintenance record is the main concern, with no release or commit activity for nearly seven years and no security scanning or policy.

Latest 1.3

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in September 2019, and there have been no releases in the last 12 months. The short early release interval shows initial activity but does not offset the nearly seven-year release gap.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating a substantial abandonment risk.

Repo popularity

The repository has zero stars and forks and one watcher, showing little visible adoption or community support. Popularity is supporting evidence only, but here it provides no compensating maintenance signal.

Repo tooling

Composer is used as the build tool, but the repository has no security scanning tools. This is a minor transparency and maintenance gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This adds a modest transparency concern, especially alongside the inactive maintenance record.