errohitsinghal/yii2-tom-select

Project backingcaution

The package and repository are owned by the same individual account. This is coherent ownership, but it provides less organizational maintenance capacity than backed projects.

Release historycaution

The package has only one release, published 262 days ago, so there is little evidence of an established maintenance cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, leaving maintenance continuity un demonstrated beyond the initial release.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene concern.

Security policycaution

The repository has no security policy, reducing clarity about how vulnerabilities would be reported and handled.