cusodede/yii2-history

Licensecaution

A license file is present in both the artifact and repository, but it is detected as GPL-3.0 while the manifest declares LGPL-3.0-or-later. This mismatch creates a real licensing clarification risk.

Release historycaution

The latest release was published in April 2023, and there have been no releases in the last 12 months despite the package being over three years old. Its eight-release history provides some maturity, but the prolonged release gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with a project whose last push was in April 2023. This is a significant abandonment concern, partly offset by the repository remaining unarchived.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a library with no recent activity, the lack of automated security scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.