pvsaintpe/yii2-boost

Release historydanger

The latest release was about 7 years ago, with no releases in the last 12 months. That long period without published updates is a substantial abandonment concern.

Repo commit activitydanger

There were no commits and no active maintainers in the last 3 months. Combined with the old release history, this indicates maintenance has effectively stopped.

Licensecaution

The package declares MIT and includes a license file, but the artifact file was detected as GPL-3.0. The mismatch creates a real licensing and adoption concern.

Repository archivedcaution

The repository is not archived, which is a compensating signal against complete project abandonment. However, its last push was about 5 years ago.

Security policycaution

The repository has no security policy. This is a transparency gap, though it is less significant than the package's prolonged inactivity.