paulzi/yii2-nested-sets

Release historycaution

The package has had no release in over eight years, despite 10 releases overall. This is a substantial maintenance concern, although the stable v1.1.0 release history shows prior maturity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, following a last push over eight years ago. This is strong evidence of inactive maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and upkeep gap rather than evidence that the release is unsafe.

Repository archivedcaution

The repository is not archived, which leaves the project technically open to maintenance. However, its last push was over eight years ago, consistent with the inactivity shown elsewhere.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. The gap matters more for a long-inactive dependency.