aminkt/yii2-upload-manager

Release historydanger

The package has had only two releases, with the latest on October 31, 2018 and none in the last 12 months. That long release gap is a substantial abandonment concern for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This weakens the more recent repository evidence and raises maintenance risk despite the later push timestamp.

Repo popularitycaution

The repository has zero stars and forks and one watcher. This offers little supporting evidence of adoption, but popularity is not decisive for a small package.

Repo toolingcaution

The project uses Composer, but no security scanning tools are configured. The missing scanning reduces oversight for a package handling uploads, although it is not by itself a severe risk.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap rather than evidence that the package is unsafe.