ailiangkuai/yii2-ueditor

Licensecaution

The manifest declares GPL-2.0 while the artifact license file is detected as MIT. This mismatch creates a material licensing and compliance concern.

Release historycaution

The package has had only two releases, both in August 2017, with no releases in the last 12 months. That long release gap is strong evidence of abandonment risk.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with nearly nine years without observed development activity.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of active community support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance-hygiene gap, especially for a package containing substantial bundled JavaScript.