d1soft/yii2-filemanager

Release historydanger

The only release was published more than eight years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a package still offered at v0.5.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the release history showing no activity since 2018. This substantially reduces confidence that defects or compatibility issues will be addressed.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external sign of an active user or contributor community.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. The missing scanning coverage adds a modest hygiene concern, although it does not by itself show that the package is unsafe.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for a package that handles uploaded media and file access.