antweb/yii2-cart

Lifecycle scriptscaution

The package declares a post-install command. Install-time behavior deserves attention for dependency hygiene, but the signal provides no evidence that this script is harmful or unusually risky.

Release historycaution

The package has had no releases in about six years, despite seven releases overall. That long gap materially increases abandonment and compatibility risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release history showing no release in about six years.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little external adoption signal.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the much stronger evidence of prolonged inactivity.