Package Health

soless/yii2-simple-catalogue

Simple catalogue Module for yii2

Latest 1.0.3.15PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Dependency profilecaution

Twelve runtime dependencies create meaningful compatibility and update exposure for this Yii2 module, especially with no development dependencies shown to support testing or maintenance.

Maintainerscaution

Only one registry account has publish access, which limits publishing redundancy. The repository is user-owned rather than organization-backed, so there is no provided evidence that this narrow base is compensated.

Release historycaution

The package has had no release for about 16 months despite 18 releases overall, indicating weak recent maintenance. Its prior release activity shows the project was not always dormant, but does not offset the current gap.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little external evidence of review or adoption. Popularity is supporting evidence rather than a verdict, so this is a mild concern.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is not evidence of a security incident.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Michael Nordheimer

Direct Dependencies

DependencyLast ReleaseScore
spatie/async
Version ^1.0
—
—
yiisoft/yii2
Version ~2.0.14
—
—
dektrium/yii2-user
Version ^0.9.14
—
—
soless/yii2-tag-editor
Version *
—
—
mihaildev/yii2-ckeditor
Version *
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform