skeeks/cms-backend

This is a mature, actively maintained release with a history dating back over 9 years, 197 releases, 23 releases in the last 12 months, a stable version profile, a non-archived organization-backed repository, and strong package documentation and structure. The main concerns are that all 36 recent commits came from one contributor, the repository has no security scanning or security policy, and the project has minimal measured popularity; these are meaningful resilience and transparency gaps but are outweighed by the recent release and commit activity, licensing, repository alignment, and absence of deprecation or install-time scripts.

Latest 2.1.1.18

Packagist

82%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All 36 recent commits came from one contributor, with a 100% top-contributor share and no second active contributor. Organization backing provides some handoff capacity, but the observed contributor concentration remains a real resilience concern.

Repo popularity

The repository has zero stars, one fork, and one watcher, indicating limited visible adoption. Popularity is supporting evidence rather than decisive, so this is a caution rather than a severe risk given the strong release and commit history.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. This lowers assurance around automated security hygiene without indicating abandonment.

Security policy

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap for a backend component.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Semenov Alexander

Direct Dependencies

Dependency	Last Release	Score
skeeks/yii2-sx Version ^1.4 \|\| dev-master@dev	—	—
yiisoft/yii2-jui Version ~2.0.0	—	—
npm-asset/sortablejs Version ^1.15.7	—	—
skeeks/yii2-ajax-pager Version ^2.0	—	—
skeeks/yii2-bootstrap4 Version ^2.0.0 \|\| dev-master	—	—