Package Health

yiisoft/yii-runner

Clear documentation and a complete source repository make integration straightforward. Licensing, repository tests, security policy, and automated checks add useful safeguards, while the infrequent release cadence and unpinned workflow actions warrant routine maintenance review.

Latest 2.2.1PackagistPackagist

84%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historycaution

The package has 10 releases since January 2022, but only one release in the last 12 months and a median interval of about 94 days indicate a relatively slow cadence. This is a maintenance caution, not abandonment evidence, because the repository was pushed recently and has current commit activity.

Workflow auditcaution

All eight workflows were analyzed successfully, use read-only permissions, and contain no reported audit findings or untrusted execution sinks. However, all nine analyzed action references are unpinned, leaving a reproducibility and action-substitution hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/di
Version ^1.0
—
—
psr/container
Version ^1.0 || ^2.0
—
—
yiisoft/config
Version ^1.1
—
—
yiisoft/yii-event
Version ^2.0
—
—
yiisoft/definitions
Version ^1.0 || ^2.0 || ^3.0
—
—

Weekly Downloads

Info

Last Published
9 months ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform