Package Health

rasuvaeff/yii3-filestorage-web

The package is clearly licensed, documented, and backed by repository tests, static analysis, and read-only, pinned workflows. Its short history leaves long-term maintenance capacity unproven.

Latest v0.1.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package is only 40 days old and has one release, so there is not yet enough history to demonstrate sustained maintenance. This is an early-project concern rather than evidence of abandonment.

Repo bus factorcaution

One contributor made all three recent commits, creating a concentrated maintenance dependency. The linked repository and package do match, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded three commits in the last three months, but all activity came from one maintainer. For a project this new, that shows activity while leaving continuity unproven.

Security policycaution

No repository security policy was found, which reduces the transparency of vulnerability reporting and response expectations. Static analysis and workflow controls provide partial hygiene compensation but do not replace a policy.

Version stabilitycaution

Version v0.1.0 is not a stable major release, indicating that the API may still change substantially. It is not marked as a prerelease, which provides some compensation.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Victor Razuvaev

Direct Dependencies

DependencyLast ReleaseScore
psr/clock
Version ^1.0
—
—
yiisoft/http
Version ^1.2
—
—
psr/http-factory
Version ^1.0
—
—
psr/http-message
Version ^2.0
—
—
psr/http-server-handler
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform