srun/provider

The package is small and documented, with one focused runtime dependency and release notes for this version. Its organization-owned repository is not archived, but it has no tests or security scanning.

Latest 1.0.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

The manifest declares a proprietary license, with no recognized license text or license file in the package or repository. This creates a material adoption and redistribution concern for an open-source dependency.

Release history

Only two releases were published, both in June 2024, and there have been no releases for about 27 months. That makes maintenance and compatibility with newer Yii versions uncertain.

Repo commit activity

The repository has had no commits and no active maintainers in the last three months, consistent with the long release gap. The small, focused package reduces the impact but does not remove the maintenance concern.

Repo tooling

Composer is used for the build, but no security scanning tooling is present. The missing scanning is a hygiene gap, not evidence that the release is unsafe by itself.

Security policy

The repository has no security policy. For a small package this is a transparency gap, though the narrow implementation and lack of reported workflow findings limit its weight.