sadi01/yii2-bi-dashboard

Dependency profilecaution

Ten runtime dependencies create a moderately broad dependency surface for a Yii extension, increasing maintenance exposure, but the provided signal does not show an unusually hazardous or excessive profile.

Project backingcaution

The package and repository are both owned by the same individual account, so the source ownership is internally consistent, though it does not provide organization-level backing.

Release historycaution

The package has 16 releases, but it has had no release in about 2 years and 4 months, which is a meaningful maintenance concern for a dashboard library.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, reinforcing the concern that maintenance has stalled.

Repo toolingcaution

Composer is used as a build tool, but the repository reports no security scanning tooling. This is a transparency and process gap, though it is not by itself evidence that the package is unsafe.