skinka/yii2-config

The package has clear documentation, a permissive MIT license, and a small dependency surface. Its source has seen no commits or releases since December 2016, with no security scanning or policy, so long-term compatibility and support are uncertain.

Latest 0.1.3

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in December 2016, and there have been no releases in the last 12 months; this is strong evidence of abandonment for a dependency that may need compatibility updates.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release gap and indicating no observed ongoing maintenance.

Repo tooling

Composer is used for the build, which is appropriate, but no security scanning tools are configured. This is a moderate transparency and maintenance gap, not evidence that the package is unsafe by itself.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities; this adds a support and transparency concern alongside the inactive project.

Workflow audit

No GitHub Actions workflows were present, so the audit found no workflow-specific risks. This also means there is no automated workflow coverage to support ongoing quality.