sjaakp/yii2-locator

The package has clear licensing, documentation, a matching repository, and a small dependency surface. Its main weakness is that maintenance appears dormant, with no release or commit activity for over two years and no security policy. It is reasonable for stable use, but pin this version and expect to maintain it yourself.

Latest 1.0.5

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

There have been six releases since January 2020, but none in the 12 months before collection; the latest release was over two years ago. This indicates materially slowed maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the evidence that active maintenance has stopped.

Repo issue activity

There are two open issues and no issue or pull-request activity in the past month. This is a modest sign of limited current engagement, but not evidence of abandonment by itself.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than a severe dependency risk.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting and handling vulnerabilities.