yang-repository/yang

Consumers get a usable README and a Composer build setup. The license mismatch and absent security policy add transparency concerns, while the package's small scope limits the evidence available for long-term support.

Latest v1.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has had only one release, published over four years ago, with no releases in the past 12 months. That is strong evidence of abandonment risk, although a small package may not need frequent releases.

Repo commit activity

The repository recorded no commits and no active maintainers in the past three months, consistent with the package's long release gap. No provided signal shows current maintenance capacity.

License

The manifest declares MIT, but the detected license file says Apache-2.0. The release is licensed, yet the mismatch creates avoidable legal and transparency uncertainty.

Maintainers

Only one registry account can publish the package, leaving a thin publishing base. The repository is user-owned, so this is a modest resilience concern rather than evidence of organizational abandonment.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no external sign of adoption or community support.