valearkot/yii2-module

Risky to depend on: the package has had no release or repository activity for nearly seven years. It is not deprecated and has a real, matching source repository, but its tiny footprint and minimal documentation offer little evidence of ongoing support.

Latest 3.3

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in August 2019, with no releases in the last 12 months and only five releases overall. This strongly suggests the package is abandoned, despite its stable version status.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in November 2019. The long inactivity is a major maintenance and abandonment concern.

Package scaffolding

A README is present and repository tests exist, which provide some transparency, but the README is only 487 characters and contains an effectively empty usage example. The missing changelog is normal for a published artifact and is not a concern by itself.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these figures provide no supporting evidence of an active user or contributor community.

Security policy

The repository has no security policy. For a small, inactive package this reduces transparency around vulnerability reporting, although it is secondary to the stronger maintenance concerns.