demmonico/yii2-helpers

Release historydanger

The latest release was published in November 2016, with no releases in the last 12 months; the package has been without a new registry release for nearly 10 years. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the last push occurring in November 2016. No provided activity signal shows ongoing maintenance capacity.

Repo popularitycaution

The repository has one star and one fork, providing little supporting evidence of broad adoption or community review. Popularity is only supporting evidence, so this reinforces but does not determine the maintenance concern.

Repo toolingcaution

The repository uses Composer, which supports reproducible package builds, but it has no security scanning tooling. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

No security policy is present in the linked repository, leaving vulnerability reporting and response expectations undocumented. The package's small scope limits the severity of this gap, but it provides no compensating security process.