xutl/yii2-ace-widget

The package has clear documentation, a matching repository, and a declared BSD-3-Clause license. Its code and release history have been inactive since November 2016, leaving substantial maintenance and compatibility risk; pinning is prudent.

Latest 1.1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, with no release in nearly ten years. The stable version label and release notes help transparency, but do not offset the prolonged inactivity.

Repo commit activity

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the last push being in November 2016. This indicates a serious lack of current maintenance.

Repo popularity

The repository has zero stars, forks, and watchers, providing no supporting evidence of community adoption or review. Popularity is only supporting evidence, so this reinforces rather than determines the maintenance concern.

Repo tooling

Composer is used as a build tool, which fits this PHP package. No security scanning tools are present, a minor process gap that does not outweigh the direct maintenance evidence.

Security policy

The repository has no security policy, which reduces the available process transparency for reporting and handling vulnerabilities. This is a secondary hygiene gap alongside the much stronger inactivity concern.