devanych/yii2-cart

Release historydanger

The latest release was published nearly seven years ago, with no releases in the last 12 months. The earlier eight-release history shows the project was once active but does not compensate for the prolonged gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating substantial abandonment risk.

Maintainerscaution

Only one account has registry publishing access. This is a thin publishing base and increases continuity risk, although the linked repository is owned by the same individual.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, but not severe enough to outweigh the maintenance concerns by itself.