futuretek/openapi-gen-server-yii2

Repo bus factorcaution

All recent commits came from one contributor, creating a concentrated maintenance dependency; organization backing provides some ability to hand work off but does not remove the immediate risk.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, which is limited activity despite the recent release cadence and therefore provides weaker maintenance evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving repository-level security hygiene less developed.

Security policycaution

The repository has no security policy, making vulnerability reporting and disclosure expectations less transparent for a package used in server applications.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but both action references are unpinned, weakening build reproducibility and supply-chain controls.