shintio/yii2-uikit

The package has a declared GPL-2.0+ license, a matching repository, and a small runtime dependency surface. Its README says usage is “Coming soon,” while security scanning is absent, limiting maintenance and integration confidence.

Latest 0.4.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in June 2018, with no releases in the last 12 months. More than eight years without a release is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no observed ongoing maintenance.

Package scaffolding

The artifact includes a README, but its usage section says “Coming soon,” leaving important consumer guidance unfinished. The absence of tests and a changelog is not penalized for the published artifact itself.

Repo tooling

Composer is used as the build tool, but no security scanning tools are configured. That reduces automated oversight, although the small package and lack of lifecycle scripts limit the concern.

Security policy

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a secondary transparency gap rather than evidence of an unsafe release.