notgosu/yii2-meta-tag-module

Release historydanger

The package has made only two releases, both on March 27, 2015, with no release in over 11 years. That strongly indicates abandonment for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, with its last push in February 2018. This provides strong evidence that maintenance has stopped.

Package scaffoldingcaution

The package includes a short README, but it explicitly says the module is under development and should not be used in production. The absence of tests is a meaningful quality gap for a framework module, while the missing changelog is ordinary packaging practice.

Repo popularitycaution

The repository has only 4 stars and 9 forks, providing little community evidence to compensate for the lack of recent maintenance. Popularity is supporting evidence rather than a verdict by itself.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This adds a transparency gap, though it is secondary to the maintenance concerns.