sam-it/yii2-urlsigner

It has a clear license, a useful README, tests, and a recent release with documented fixes. The small public footprint and absent security policy reduce transparency, while the recent release history and organization backing limit abandonment concern.

Latest v4.2.2

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the three months before collection. Recent releases compensate partly, but the lack of current development activity remains a maintenance concern.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This may reflect a quiet, small project rather than abandonment, so it is only a mild concern.

Repo popularity

Six stars and three forks indicate a small user base. This lowers independent evidence of maturity but is supporting evidence only and does not outweigh the project's other health signals.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning coverage is a transparency gap for a package handling signed URLs.

Security policy

The repository has no security policy. For a component intended for secure URL signing, that leaves vulnerability-reporting expectations undocumented.