yadjet/yii2-validators

The package includes tests, a clear BSD-3-Clause declaration, and no install-time scripts. Its small project footprint and lack of a security policy limit confidence in long-term support.

Latest 1.0.1

Packagist

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases exist, with the latest published in August 2019 and no releases in the past 12 months. This is a substantial maintenance concern for a dependency, despite the package not being registry-deprecated.

Repo commit activity

There were no commits or active maintainers in the past three months, consistent with a project whose latest repository push was in November 2022. This raises abandonment risk.

Project backing

The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to compensate for the thin maintenance record.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not decisive for a small utility, but these figures provide little supporting evidence of community review or adoption.

Repo tooling

The repository uses Composer for builds, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap.