shoxabbos/yii2-apicrud

The package has no automated tests, changelog, security policy, or security scanning, leaving maintenance quality hard to verify. Its focused dependency set, README, MIT declaration, and matching repository provide useful transparency, but not enough to offset the long-term inactivity.

Latest v1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 9 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk, although the package is not marked deprecated.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, and its last push was about 9 years ago. No newer maintenance signal compensates for this inactivity.

Package scaffolding

The artifact includes a README, which helps consumers integrate it, but it has no tests or changelog and no release notes for this version. Missing tests and release documentation reduce confidence in ongoing maintenance.

Repo tooling

Composer is used as the build tool, but the repository has no security scanning. The lack of scanning is a meaningful hygiene gap for a package with no recent maintenance activity.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, especially alongside the absence of recent development activity.