imdake/yii2

Release historydanger

The package has had no releases in the last 12 months, and its latest release was in September 2020 despite being over six years old. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This materially lowers confidence that defects or compatibility issues will be addressed.

Repo popularitycaution

The linked repository has zero stars, forks, and watchers, providing no supporting evidence of an active user or contributor community. Popularity is only supporting evidence, but this adds to the abandonment concern.

Version stabilitycaution

The assessed version is still marked as a prerelease alpha, which signals unfinished or unstable API expectations. The mature package structure partly compensates, but not enough to remove the adoption concern.

Workflow auditcaution

All 18 analyzed action references are unpinned, weakening build reproducibility and increasing workflow supply-chain exposure. The audit found no untrusted checkouts, script injection, dangerous triggers, or other reported findings, so this remains a hygiene concern rather than a severe workflow risk.