perfbase/yii2

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a package only about five months old.

Repo popularitycaution

The repository has one star and no forks or watchers. This is weak adoption evidence, although the package's young age and organization backing partly limit its significance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no SECURITY.md or equivalent security policy, reducing transparency around vulnerability reporting and response.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, leaving them exposed to moving upstream code.