wdmg/yii2-bookmarks

Clear licensing and a usable README make integration straightforward. The small repository and absent security policy leave less evidence of ongoing support and security process.

Latest 1.0.0

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in the last 12 months, and its latest release was over three years ago. This is meaningful evidence of slowed maintenance, though the 11-release history shows it was previously published consistently.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This raises the risk that fixes may not arrive promptly.

Repo popularity

The repository has 3 stars and 2 forks, indicating a small user and contributor footprint. Low popularity is only supporting evidence, but it provides little external maintenance capacity to compensate for inactivity.

Repository archived

The repository is not archived, which preserves a path for future maintenance, but its last push was over three years ago and does not offset the recent inactivity.

Security policy

The linked repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented. This is a transparency and maintenance-process gap, not evidence of a vulnerability.