sam-it/yii2-mariadb

Clear licensing, substantial tests, and release notes make the package transparent to consumers. Its small project footprint and limited recent activity leave less evidence of continued maintenance.

Latest v4.1.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers during the last 3 months. The recent release partly offsets this, but the lack of current development evidence raises maintenance risk.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policy

The repository has no security policy, so it gives consumers no documented channel or process for reporting vulnerabilities.

Workflow audit

The single workflow was fully analyzed with no untrusted checkout or script-injection path, but all seven action references are unpinned and the audit found a high-confidence unpinned container image.