odilov-sh/yii2-image-cropper

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and a substantial abandonment risk.

Release historycaution

This is the package's only release, published about five years and ten months ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a dependency.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. That provides normal packaging support without evidence of automated security oversight.

Security policycaution

The repository has no security policy, so consumers have no documented channel or process for reporting security issues. This is a meaningful transparency gap for a package that handles image uploads.