antweb/yii2-subscription

Release historydanger

The latest release was published on December 31, 2019, with no releases in the last 12 months. This is strong evidence of stagnation for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no releases since 2019. This materially raises abandonment risk.

Lifecycle scriptscaution

The package runs a post-install-cmd lifecycle script, which adds install-time behavior that consumers must account for. This is a modest supply-chain and reproducibility concern without evidence of malicious behavior.

Security policycaution

The linked repository has no security policy. That weakens vulnerability-reporting transparency, although it is less serious than the evidence of inactive maintenance.