weesee/yii2-pdflabel

The package has a clear README, exact-version release notes, and no install-time scripts. Its small, single-owner project and missing security policy provide little visible support if issues arise.

Latest v0.2.1

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The last release was more than eight years ago, with only three releases overall and none in the past 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded no commits and no active maintainers in the past three months, consistent with the long release gap and leaving maintenance capacity unproven.

Maintainers

Only one registry account can publish releases. The linked repository is user-owned rather than organization-backed, so there is limited visible redundancy if that maintainer becomes unavailable.

Repo issue activity

Two issues remain open, with no issues or pull requests closed or merged in the past month. This adds to the lack of evidence that problems are actively handled.

Repo tooling

Composer is used for builds, which supports ordinary package management, but no security-scanning tooling is present. This is a modest transparency gap rather than a severe risk.