pastuhov/yii2-redis-mutex

Release historydanger

The package has only two releases, with none in the last 12 months and the latest published about six years ago. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no recent maintenance capacity.

Licensecaution

A license file is present, but it identifies GPL-3.0 while the manifest declares GPL-2.0. The package is licensed, yet the mismatch creates a material legal and transparency concern.

Maintainerscaution

Only one registry maintainer is listed, leaving little visible publishing redundancy. The matching user-owned repository provides some attribution but does not offset the narrow maintainer base.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are reported. This is a modest maintenance-hygiene gap rather than evidence that the release is unsafe.