xutl/yii2-collection

Risky to adopt: this package has had only one release, in November 2016, and the repository has seen no recent activity. It is small, clearly packaged, licensed, and not deprecated, but its long-term abandonment risk is substantial.

Latest 1.0.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, first and latest published in November 2016, with no releases in the last 12 months. This is strong evidence of an unmaintained dependency, although the stable 1.0.0 version may indicate a deliberately small, finished utility.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with a repository that has been inactive for years. This is the main abandonment concern for taking a dependency.

Repo popularity

The repository has zero stars, zero watchers, and one fork. Popularity is not required for a healthy small package, but these figures provide no meaningful community support signal alongside the inactivity.

Repo tooling

The repository uses Composer, which is appropriate for this PHP package, but has no security scanning tools. The missing scanning is a transparency gap, though the package's small, simple file tree limits its significance.

Repository archived

The linked repository is not archived, which means it remains technically open to maintenance. Its last push was in March 2017, so the non-archived status provides limited reassurance.