aayaresko/yii2-widget-timer

Release historydanger

The package has only two releases, with none in the last 12 months; the latest release was over 10 years ago. This is strong evidence of an abandoned release line, despite the package's age and stable version.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months, consistent with the repository's last push being over 8 years ago. This materially raises abandonment risk.

Project backingcaution

The registry namespace and repository are owned by the same individual account. That is consistent ownership, but it provides less organizational maintenance capacity than a backed project.

Repo popularitycaution

The repository has 1 star, 2 forks, and 1 watcher. This is limited supporting evidence of community adoption, though popularity alone is not decisive.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool is configured. The missing scan is a transparency and hygiene gap rather than evidence of maliciousness.