pastuhov/yii2-yml-catalog

Release historydanger

The latest release was published about 8 years ago, with no releases in the last 12 months. Although the package had 26 releases and a prior median interval of about 20 days, the current inactivity is a substantial maintenance concern.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release gap and indicating no visible ongoing maintenance.

Dependency profilecaution

The package declares four runtime dependencies, including Yii2 and two project-specific libraries. This is a manageable dependency surface, though the old release age makes compatibility with current dependency versions uncertain.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The absence of scanning is a modest hygiene gap, not evidence that the package is unsafe.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented. This adds a transparency concern for a package with no recent maintenance evidence.