arckteh/yii2-request-app

Release historydanger

This package has only one release, published nearly three years ago, with no releases in the last 12 months. That weakens confidence in ongoing maintenance.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with a project that has not shown recent maintenance for nearly three years.

Licensecaution

A license file is present, but the manifest declares MIT while the artifact license file is detected as BSD-3-Clause. This mismatch creates a transparency and compliance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That is a modest process gap for a package with no recent maintenance evidence.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This adds a modest transparency concern but is not severe alone.