xutl/yii2-fmt-asset

The package is small, clearly identified, licensed, and has no install-time scripts or registry deprecation. Its single maintainer, absent security scanning, and lack of tests leave little evidence of ongoing support.

Latest 1.0.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published over nine years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, although a small stable extension may need few updates.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long lack of releases. No provided maintenance signal compensates for this inactivity.

Maintainers

One registry maintainer is a thin publishing base, and the repository is user-owned rather than organization-backed. This increases bus-factor and continuity risk.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external adoption signal to offset the maintenance concerns.

Repo tooling

Composer is used for the build, which is appropriate for this PHP package, but no security-scanning tools are present. The missing scanning is a modest transparency and maintenance gap.