besnovatyj/yii2-cms-blocks

Maintainerscaution

Only one registry account, Besnovatyj, has publishing access, and the project is backed by a user-owned repository rather than an organization. This leaves limited visible publishing redundancy.

Release historycaution

The package is only 1 day old, despite having four releases in that period. That shows active initial publishing but provides little evidence of sustained maintenance.

Repo commit activitycaution

No commits or active maintainers were recorded in the last 3 months. Because the package is only 1 day old and was pushed today, this is more a lack of established history than evidence of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning is a modest repository hygiene gap.

Security policycaution

The repository has no security policy. For a module that processes administrator-managed content, this reduces the clarity of vulnerability reporting and maintenance expectations.