hiqdev/yii2-asset-hipanel

Release historydanger

The package has only two releases, with the latest published in September 2016 and none in the last 12 months. That long release gap is strong evidence of abandonment risk, although a small asset package may need few changes.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push occurring years ago. No provided maintenance signal compensates for this inactivity.

Repo popularitycaution

The repository has two stars and no forks, showing little community evidence or external validation. Popularity is supporting evidence only, so this modestly reinforces—but does not create—the maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For this small, old asset package that is a limited transparency gap rather than a severe supply-chain concern.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap, not evidence that the package is unsafe.