xj/yii2-jplayer-widget
The repository is small and lightly used, with no tests or security policy to support future fixes. It is licensed, has a README, and its source still matches the package.
43%
Total Score
33
100
78
83
Health Score Breakdown
The latest release was in July 2015, with no releases in the last 12 months and only four releases overall. This is strong evidence of abandonment for a dependency that may need compatibility fixes.
There were no commits or active maintainers in the last three months, consistent with the repository's last push in 2017. This materially raises the risk that defects and platform changes will go unaddressed.
Only one registry account can publish the package, leaving a thin publishing base. The repository is also owned by an individual, so there is no shown organizational backing to compensate for that concentration.
The repository is owned by an individual user rather than an organization, and no organizational backing is shown. That leaves the package dependent on a narrow maintenance base.
The repository has only 4 stars, 4 forks, and 2 watchers. Low popularity is supporting evidence rather than a verdict, but it provides little external maintenance signal.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 xjflyttp |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version * | — | — |
bower-asset/jplayer Version 2.9.* | — | — |
bower-asset/circleplayer Version * | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.