enchikiben/yii2-sitemap

Release historydanger

The latest release was published about 7 years ago, with only two releases overall and none in the last 12 months. This is strong evidence of abandonment risk, although the repository is not archived.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and indicating no recent maintenance capacity.

Maintainerscaution

The package has one registry maintainer. That can be adequate for a small project, but it leaves little visible redundancy when activity has already stopped.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security-scanning tooling is present. This provides less evidence of routine dependency and supply-chain hygiene.

Security policycaution

The linked repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is not severe by itself.