yii-diandi/yii2-addons

Usable with caveats: it has a long release history and recent registry releases, but repository development has been inactive for about six months and the project has little external adoption or security documentation.

Latest 6.0.6

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A README is present, but it is only 342 characters and provides minimal usage guidance. The absent tests and changelog are not concerns for the published artifact because those normally belong in the source repository.

Project backing

The registry namespace and repository owner match, and the owner is an individual account rather than an organization. This is consistent ownership, but it indicates a relatively narrow project backing.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers during the last 3 months, despite the package's active release history. This gap between publishing and source development raises a meaningful maintenance risk.

Repo popularity

The repository has only 4 stars, 0 forks, and 1 watcher, indicating limited external adoption. Popularity is supporting evidence rather than decisive on its own, but it provides little additional confidence here.

Repo tooling

Composer is used as a build tool, providing basic project build structure, but no security scanning tooling is configured. The missing scanning is a transparency gap for a package with many application-facing components.