spanjeta/yii2-backup

The project is clearly identified, licensed under Apache-2.0, and has only one runtime dependency. Its README and release structure help, but the lack of security policy leaves maintenance transparency thinner.

Latest v2.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 9 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk despite the package having five historical releases.

Repo commit activity

The repository recorded no commits and no active maintainers in the past 3 months, consistent with the last push being about 8 years ago. This materially lowers confidence in ongoing maintenance.

Repo issue activity

There were no new or closed issues or pull requests in the past month, while 9 issues and 3 pull requests remain open. This suggests little recent project attention.

Repo tooling

Composer is used for the build, but no security scanning tools are present. This is a modest process gap rather than evidence of unsafe behavior by itself.

Security policy

The repository has no security policy, which weakens the project's transparency for reporting and handling maintenance or security issues. The absence is a genuine hygiene gap for a database backup extension.