kasoft/yii2-fileupload

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement package identifier beyond a repository URL; this is a severe adoption risk despite other positive signals.

Project backingcaution

The repository is owned by a personal user account rather than an organization, so the two registry maintainers provide only limited backing context.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, weakening evidence of ongoing maintenance despite the recent release history.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are present; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.