nullref/yii2-cms

Dependency profilecaution

The package declares 11 runtime dependencies, creating a relatively broad upkeep surface for an old CMS module and increasing the chance that compatibility work is needed.

Release historycaution

The latest registry release was published nearly 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package having five historical releases.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the long release gap and indicating no current maintenance activity.

Security policycaution

The linked repository has no security policy. This weakens transparency and gives consumers no documented channel or process for reporting security issues.