edwinhaq/yii2-simple-dual-listbox

Release historycaution

The latest release was about 8 years ago, with no releases in the last 12 months. Four releases show some history, but the long inactivity materially raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap and providing little evidence of current maintenance.

Repo popularitycaution

The repository has only 4 stars, 0 forks, and 3 watchers. Popularity is supporting evidence rather than a verdict, but these figures suggest a very small user and contributor community.

Repo toolingcaution

Composer is used for builds, which fits the package, but no security scanning tools are present. That is a transparency and maintenance gap, though not a severe risk by itself.

Security policycaution

The repository has no security policy, leaving no documented route for reporting or handling vulnerabilities. This is a modest transparency gap for a dependency.