mihaildev/yiicomposer

Release historydanger

The last release was over 12 years ago, with no releases in the past 12 months and only three releases overall. This is strong evidence of abandonment risk despite the package not being marked deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release history and leaving current maintenance capacity unproven.

Package scaffoldingcaution

The artifact includes a README file, but it is empty; the absence of tests and a changelog is normal for published artifacts and is not itself a gap. The empty consumer documentation still reduces transparency.

Repo popularitycaution

The repository has one star, one fork, and one watcher, providing little evidence of community review or shared maintenance. Low popularity is supporting evidence rather than a verdict by itself.

Security policycaution

The repository has no security policy. For a small, inactive package this is a transparency and vulnerability-reporting gap, though it is less significant than the lack of maintenance activity.