kartik-v/yii2-context-menu

Maintainerscaution

Only one account has registry publishing access. The linked repository is also user-owned rather than organization-backed, so there is limited visible redundancy if the maintainer becomes unavailable.

Release historycaution

The package has seven releases over nearly 12 years, but none in the last five years and the latest was on 1 September 2021. This is strong evidence of stalled maintenance for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long release gap and indicating no recent maintenance capacity.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is less severe than the prolonged inactivity.