agroxy/yii2-multilingual

Release historydanger

The package has existed for roughly 7 years and 10 months but has had only three releases, with none in the last 12 months; its latest release was in November 2018. This is strong evidence of inactivity for a library dependency.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the last push in January 2019. The project is not archived, but current maintenance capacity is not evident.

Repo popularitycaution

The repository has 0 stars, 1 fork, and 1 watcher, providing little supporting evidence of broad review or an active user community. Popularity is only supporting evidence, so this modestly lowers confidence in project maturity rather than deciding the verdict alone.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security-scanning tooling was detected. That is a hygiene gap, not evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported. This is a secondary concern because the package does provide source, tests, documentation, and licensing information.