ignatenkovnikita/yii2-queuemanager

Project backingcaution

The repository is owned by the same individual namespace as the package, with no organization backing shown. That is consistent ownership, but it leaves a thin maintenance base when combined with inactive commits.

Release historycaution

Only two releases exist, with none in the last 12 months and the latest release about four years ago. This strongly limits evidence of ongoing maintenance, although the package is not deprecated.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the last repository push being about four years ago. This is the main abandonment concern for depending on the package.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This matters for a queue-management component but is less severe than archived or deprecated status.