kfosoft/yii2-crypto-js-asset-bundle

Licensedanger

No declared license, license file, or repository license file was detected. That creates a real adoption and redistribution concern for an open-source dependency.

Release historydanger

This is the package's only release, published nearly 11 years ago, with no releases in the last 12 months. That strongly indicates abandonment despite the stable version.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months. Combined with the single historical release, this is strong evidence that maintenance has stopped.

Package file treecaution

The package contains only four files, including the bundle class, bundled JavaScript, composer metadata, and README. Its small, transparent structure helps inspection but also shows little project depth.

Repo popularitycaution

The repository has zero stars, two forks, and one watcher, providing little evidence of a community that could surface or fix problems. Low popularity alone is not disqualifying for a small bundle.