riadvice/yii2-audit

Release historydanger

The package has made no releases in the last seven years, and its latest registry release was nearly seven years ago. This is strong evidence of abandonment for a library dependency.

Licensecaution

The manifest declares MIT, but the artifact license file was detected as BSD-3-Clause. Although a license file is present, the mismatch creates avoidable legal uncertainty.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest hygiene gap alongside the lack of recent maintenance.

Security policycaution

The linked repository has no security policy. That weakens vulnerability-reporting transparency, especially for a package that records application requests and associated data.