codificar/yii2imagecache

Release historycaution

The latest release was about five years ago, with no releases in the last 12 months; this materially raises abandonment risk for a dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long release gap and weakening confidence in ongoing maintenance.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected; this is a modest transparency gap rather than a severe concern for this small package.

Repository archivedcaution

The repository is not archived, but its last push was about five years ago, so the non-archived status does not offset the clear maintenance gap.

Security policycaution

No repository security policy was found, reducing the evidence that vulnerability reporting is handled, although the package is small and has no other reported security signal.