Package Health

tourze/yii2-base

The package includes tests, a clear license, and no install-time scripts. Its only release is about 17 months old, repository commits have stopped, and every workflow action is unpinned. Pin this exact version only if its current behavior is already sufficient.

Latest 0.0.1PackagistPackagist

47%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

67

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historydanger

This is the package's only release, published about 17 months ago, with no releases in the last 12 months. That limited history and long inactivity reduce confidence in ongoing maintenance.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the single-release history, this is strong evidence of reduced or absent maintenance capacity.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy small package, but these counters provide no supporting evidence of community adoption or oversight.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is less significant than the maintenance concerns.

Version stabilitycaution

Version 0.0.1 is not a stable major release, so its API and behavior may still change substantially if development resumes. The absence of later releases provides no evidence of maturation.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform