gvasilopulos/yii2-enhanced-gii

Release historydanger

The package has had 8 releases, but none in the last 12 months; its latest release was in December 2016, about 9 years ago. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months, consistent with the long gap since the last release and indicating no current maintenance capacity.

Dependency profilecaution

The package declares 10 runtime dependencies and no development dependencies. This creates a relatively broad dependency surface for an old package, with no provided evidence of current compatibility maintenance.

Licensecaution

A LICENSE file is present in both the artifact and repository, but the manifest declares BSD-3-Clause while the artifact license is detected as MIT. That mismatch reduces release transparency.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing signal to offset the inactive project history.