language/yii2-protobuf

Release historydanger

The package has had only two releases, with the latest published in December 2018 and none in the last 12 months. This long period without releases is strong evidence of abandonment risk for a dependency.

Repo issue activitycaution

There are two open issues but no new or closed issues, pull requests, or merges in the measured one-month period. This supports the broader indication that the project is inactive.

Repo popularitycaution

The repository has only 4 stars, 1 fork, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these low figures provide little evidence of a broad maintenance community.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a transparency and maintenance gap, though it is less significant than the prolonged inactivity.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, especially for a package handling encoded request and response data, but it is not independently a severe risk.