mdmsoft/yii2-upload-file

Licensecaution

The manifest declares BSD-3-Clause, while the artifact license file is recognized as GPL-3.0; although license files exist in both the package and repository, the mismatch needs resolution before adoption.

Release historycaution

The package has seven releases over nearly 12 years but none in the last 12 months; the latest registry release was in November 2016, indicating substantial release stagnation.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance for a package whose registry releases have already stopped.

Repo issue activitycaution

There are five open issues and two open pull requests, but no new or closed issues or pull requests in the last month, consistent with limited current project activity.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are configured, leaving a modest transparency and maintenance gap.