hiqdev/yii2-asset-autosize

Release historycaution

The package has made no release in about eight years; its 11-release history shows an established project, but current maintenance is not demonstrated.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long gap since the latest release and raising abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The linked repository has no security policy, leaving no documented route for reporting vulnerabilities. The complete package structure and stable release partly offset this gap.