sam-it/yii2-magic

Its focused dependency surface and clear MIT licensing reduce adoption friction. Missing security tooling and policy leave less evidence for ongoing maintenance and response if problems arise.

Latest v5.0.0

Packagist

44%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 22 releases since February 2016, but none in the last 12 months and its latest release was in October 2020. This long period without a release materially raises abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's multi-year release gap and indicating no observed current maintenance.

Repo issue activity

There was no new or closed issue or pull request activity in the last month, with one issue still open. This supports the broader evidence of an inactive project.

Repo tooling

The repository uses Composer, which supports reproducible project setup, but it has no detected security-scanning tooling. That is a modest transparency and maintenance gap for a dependency library.

Security policy

No security policy was found in the linked repository, leaving no documented process for reporting and handling vulnerabilities. This is a hygiene concern, not evidence that the package is unsafe.