hiqdev/yii2-asset-visibilityjs

Release historydanger

The package has had only two releases, both in April 2016, with no release in roughly 10 years. This is strong evidence of abandonment risk, although the stable version and small scope may reduce the need for frequent changes.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in April 2021. That prolonged inactivity materially lowers confidence in ongoing maintenance.

Repo popularitycaution

The repository has only 1 star and 1 fork, providing little evidence of broad adoption or a large user community to surface issues and sustain maintenance.

Security policycaution

The linked repository has no security policy, reducing transparency about vulnerability reporting and response procedures. This is a hygiene and maintenance concern, not evidence of maliciousness.