anruence/yii2-editor.md

Release historydanger

The package has had only two releases, with the latest published in May 2018 and none in the last 12 months. This is strong evidence of an aging, potentially abandoned dependency, though it is not registry-deprecated.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and hygiene gap rather than evidence that the package is unsafe to depend on.

Repository archivedcaution

The linked repository is not archived, which avoids a severe abandonment signal, but its last push was in May 2018 and provides no indication of recent maintenance.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. For a small, old package this adds to the limited evidence of ongoing maintenance.