grenhaz/yii2-time

Release historydanger

This is the only release, published about 8 years ago, with no releases in the past 12 months. That leaves substantial abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past 3 months, consistent with the last push occurring about 8 years ago. The stable 1.0.0 version does not compensate for the lack of maintenance evidence.

Security policycaution

The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This is a secondary concern, not evidence that the package is unsafe.