tecnocen/yii2-roa
The source includes tests, a changelog, release notes, and substantial documentation. It is not deprecated or archived, but the small project footprint and lack of security tooling reduce confidence in long-term support.
42%
Total Score
50
71
100
Health Score Breakdown
The package has 21 releases, but its latest release was about 7 years ago and it has had no releases in the last 12 months. The earlier regular cadence does not compensate for the prolonged current gap.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the package's multi-year release gap. This is strong evidence of limited current maintenance.
Composer is used as the build tool, but no security scanning tools were detected. The missing scanning layer is a modest transparency and maintenance concern, alongside the stronger inactivity evidence.
Version 0.5.0 is not marked as a prerelease, which is positive, but remaining below 1.0 suggests a less mature compatibility commitment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Angel (Faryshta) Guevara |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ~2.0.14 | — | — |
tecnocen/yii2-oauth2-server Version ^4.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.