vladovinkin/yii2-imgopt

The package is tiny and documented, with a straightforward dependency footprint and no install-time scripts. Its maintenance and security evidence is limited, so pinning 1.2.1 is prudent.

Latest 1.2.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published in October 2022, with no releases in the following 12 months; that leaves maintenance continuity unproven.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has seen no activity since its initial release.

Repo popularity

Zero stars, forks, and watchers provide no supporting evidence of adoption or community review, though popularity is only supporting evidence and does not determine health alone.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected; this is a modest transparency gap rather than a severe dependency risk.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package that processes images.