rahulswt7/yii2-weather-widget

Release historydanger

The package has made four releases, but none in nearly seven years; the latest release was published in November 2019. This is strong evidence of abandonment risk despite the early release activity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, after nearly seven years without a release. This materially increases the risk that defects and compatibility problems will go unaddressed.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of a broad or active user community.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are present. The missing scanning is a maintenance and hygiene gap rather than evidence of malicious behavior.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency gap for a package that may be used in applications.