dersonsena/yii2-skeleton

Release historydanger

The package has had no release in more than four years, and there were no releases in the last 12 months. This substantially raises abandonment and compatibility risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates that fixes and updates are unlikely to arrive promptly.

Lifecycle scriptscaution

Composer install and create-project hooks are present, which is expected for an application skeleton but means installation performs automated actions that should be understood before use.

Project backingcaution

The registry namespace and repository are owned by the same individual account, which provides direct ownership alignment but not the broader maintenance capacity of an organization.

Repo toolingcaution

The repository uses Make and Composer, supporting repeatable project work, but no security scanning tools were detected. That is a modest transparency and maintenance gap.