consultnn/yii2-opening-hours

Release historydanger

The package has had no release in more than 10 years: its latest release was in October 2015, with none in the last 12 months. This is strong evidence of abandonment for a dependency that may need ongoing compatibility fixes.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history's long inactivity. The repository is not archived, but that does not compensate for the absence of recent work.

Package scaffoldingcaution

The package contains no README, which makes integration harder for consumers of this Yii2 library. Missing tests and a changelog are normal for a published artifact and are not counted against it; the GitHub release indicates some release traceability.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tool is configured. This leaves a transparency and maintenance gap, though it is secondary to the lack of recent activity.

Security policycaution

The repository has no security policy, so there is no stated process for reporting or handling vulnerabilities. For an old dependency this adds a modest maintenance and transparency concern.