Package Health

rikcage/yii2-sceditor

The package is documented and has a clear MIT declaration, but it has no tests or security policy and no visible community support. Its bundled assets are substantial, yet future compatibility work is not demonstrated.

Latest 0.0.1PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

There has been only one release, on December 11, 2018, with none in the last 12 months. That long period without a new release is strong evidence of abandonment risk for a framework extension.

Repo issue activitycaution

The repository has zero open issues and no issue or pull-request activity in the last month. This is not inherently bad for a small package, but alongside the old release it provides no evidence of current support.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external signal of adoption or community resilience.

Repository archivedcaution

The repository is not archived, which leaves the project technically open for maintenance, but its last push was also on December 11, 2018 and does not offset the stale release history.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, although it is less significant for a small UI extension than for a service or security-sensitive library.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Rik Cage

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version *

Weekly Downloads

Info

Last Published
7 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform