eddmash/yii2-transpose-dataprovider

Release historydanger

The package has only two releases, both published in November 2016, with no release in roughly nine years. That is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the repository having been inactive since 2017. This is the main ongoing-maintenance concern.

Maintainerscaution

Only one registry account has publishing access, leaving the release process dependent on a single maintainer. The linked repository is user-owned, so there is no organizational backing to offset this thin maintainer base.

Repo popularitycaution

The repository has four stars and two forks, indicating limited adoption and a small community for discovering or addressing problems. Popularity is supporting evidence, but this alone would not make the package unhealthy.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance gap, though it is less significant than the prolonged inactivity.