Package Health/thamtech/yii2-ratelimiter-advanced

thamtech/yii2-ratelimiter-advanced

Clear documentation, repository tests, and a matching BSD license make the package transparent. Its narrow dependencies and no install scripts limit operational risk, but the lack of security scanning leaves maintenance coverage thinner.

Latest 0.5

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly six years, with zero releases in the last 12 months. Its five-release history shows a real project, but the long pause raises abandonment risk.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the much longer release pause. This materially increases the risk that defects or compatibility issues will remain unresolved.

Repo issue activity

There are four open issues and one open pull request, with no issues or pull requests changed in the last month. The small backlog is not severe, but its lack of movement reinforces the maintenance concern.

Repo tooling

Composer build tooling is present, supporting a conventional build, but no security-scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency and maintenance gap, though the package's clear documentation and license provide some compensating evidence.