kartik-v/yii2-nav-x

Release historycaution

The package has no release in nearly five years: v1.2.5 was published in November 2021, despite an established history of eight releases. That makes ongoing maintenance uncertain.

Repo commit activitycaution

The repository recorded no commits or active maintainers in the last three months, consistent with the long release gap. This raises abandonment risk even though the repository is not archived.

Security policycaution

The repository has no security policy, leaving no documented channel or process for handling vulnerabilities. This is a transparency gap, but not evidence that the package is unsafe.