rasuvaeff/yii3-filestorage

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational handoff capacity. This reinforces the single-contributor continuity concern.

Release historycaution

The package is only 42 days old with two releases, so its maintenance pattern and compatibility track record are still limited. The two releases in that short period show active initial development but not long-term stability.

Repo bus factorcaution

One contributor made all 20 commits in the last three months, creating a concentrated maintenance dependency. No organization backing is present to offset that concentration.

Security policycaution

The repository has no published security policy. For a file-storage package handling uploads and delivery, that is a transparency gap, though the available Psalm and workflow evidence partly compensates for it.

Version stabilitycaution

Version v0.1.1 is not a stable major release, and the README explicitly says the API may still change. That is a meaningful compatibility concern for adopters.