fufudao/yii2-base

Release historydanger

The package has only one release, with the latest published about 10 years ago and none in the last 12 months. This is strong evidence of a stagnant project, although the absence of deprecation partly reduces the concern.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months, reinforcing that development has effectively stopped. No provided activity signal shows compensating maintenance.

Dependency profilecaution

The package has four runtime dependencies, including both Yii 1 and Yii 2 components, which fits its stated bridging purpose. The dependency set is not unusually large, but old dependencies may increase compatibility work for adopters.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little evidence of community adoption or external support. Popularity is supporting evidence rather than decisive on its own, so this is a caution rather than a standalone severe risk.

Repo toolingcaution

Composer is used as a build tool, which is appropriate for a PHP package, but no security scanning tools are configured. The basic build setup is positive while the lack of security tooling modestly reduces project hygiene.