shurik2k5/yii2-eav

The repository has no tests, changelog, security policy, or security scanning, leaving limited evidence of ongoing quality control. It does include a clear README and MIT licensing, but those strengths do not offset the maintenance risk.

Latest v0.7.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in over 7 years: its latest and only recorded release date is April 17, 2019, with zero releases in the last 12 months. This is strong evidence of abandonment.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and indicating no current maintenance.

Package scaffolding

The package includes a substantial README, while the absence of tests and a changelog in the published artifact is normal packaging practice. The repository also has no tests or changelog, reducing evidence of project quality and release discipline.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these counts provide little indication of community support or external review.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. This is a modest transparency and maintenance gap rather than a severe risk.