kartik-v/yii2-icons

Release historydanger

The package has 13 releases over roughly 12 years, but its latest release was over four years ago and there were no releases in the last 12 months. This materially raises staleness risk.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months. Together with the old registry release, this is a meaningful maintenance and abandonment concern.

Project backingcaution

The registry namespace and repository owner match, and the repository is user-owned rather than organization-backed. The matching ownership supports authenticity, while the single-owner model leaves limited visible backing capacity.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with five issues still open. This supports the conclusion that active maintenance is currently limited.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of unsafe code.