consultnn/yii2-multi-embedded-widget

Release historydanger

The package has had only one release, published over ten years ago, with none in the last 12 months. This is strong evidence of abandonment risk, though the stable 1.0 version avoids prerelease uncertainty.

Repo commit activitydanger

The repository has had zero commits and zero active maintainers in the last three months, consistent with its last push being years ago. No newer release or activity compensates for this maintenance gap.

Repo popularitycaution

The repository has zero stars and one fork, indicating little visible adoption. Popularity is supporting evidence rather than a verdict, but it reinforces the long-standing inactivity.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. This leaves a modest supply-chain hygiene gap, while the simple package structure limits how strongly it weighs.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities would be reported or handled. This is a maintenance and disclosure gap, not evidence of malicious behavior.