sjaakp/yii2-comus

The package is clearly documented, licensed, and published from a matching repository without install-time scripts. Its small project footprint and lack of tests or security tooling provide limited protection for a Yii2 integration.

Latest 1.0.2

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in December 2019, with no releases in the last 12 months and only three releases overall. This is strong evidence of prolonged inactivity for a package handling application comments.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the nearly seven-year release gap. The repository is not archived, but there is no observed recent maintenance.

Repo popularity

The repository has one star, zero forks, and one watcher, showing very limited independent adoption or visible project backing. Popularity is supporting evidence, but it reinforces the abandonment concern here.

Repo tooling

Composer is used for the build, but no security scanning tools are present. That leaves a meaningful maintenance and review gap for a package with no recent activity.

Security policy

The repository has no security policy, reducing transparency about how vulnerabilities should be reported. This compounds the risk from the long period without observed maintenance.