intersvyaz/yii

Release historycaution

The package is mature, with 14 releases over more than 10 years and one release in the last 12 months. The low recent cadence is a mild maintenance concern, but the latest release is recent.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent release and push provide some compensation, but the immediate lack of development activity raises maintenance risk.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no pull requests were open. This is limited evidence of current project interaction, but issue counts are partly unknown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The repository's security policy partly compensates for this tooling gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts or script injection, but all 8 action references are unpinned and the audit found a high-confidence unpinned container image. This weakens build reproducibility and supply-chain hygiene.