pozitronik/yii2-relations

Release historycaution

The package has 8 releases over roughly five years, but none in the past 12 months. That points to slowing maintenance, although the latest release was published in August 2025 and the repository is not archived.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the past 3 months. This is meaningful abandonment risk because no recent source activity is visible.

Security policycaution

The linked repository has no security policy. That weakens vulnerability-reporting transparency, though it is a moderate documentation gap rather than evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 3 action references are unpinned. This is a workflow reproducibility and supply-chain hygiene gap, not a severe risk by itself.