yiiext/migrate-command

The package is small and easy to inspect, with a README, changelog, matching repository, and no install scripts. Its sole release and inactive project make it a poor long-term dependency despite no deprecation or archive flag.

Latest 0.8.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published over 11 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency users may need to maintain.

Repo commit activity

The repository had no commits and no active maintainers in the last 3 months, while its last push was in February 2015. The prolonged lack of observed maintenance materially raises abandonment risk.

Repo issue activity

There were no new or closed issues or pull requests in the last month, despite 9 open issues and 4 open pull requests. This suggests the project is not actively responding to outstanding work.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe defect.

Security policy

The linked repository has no security policy. For this small, old migration command the gap is limited, but it provides no documented security-reporting process.