dvixi/yii2-alpaca-json

Release historydanger

This package has one release, published over eight years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk despite the absence of registry deprecation.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the package's long release silence. The repository is not archived, but there is no observed recent maintenance.

Repo popularitycaution

The repository has only 1 star, 1 fork, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide little evidence of broad review or community support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest hygiene gap for a package that handles application data.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is less serious than the lack of maintenance activity.