shamanzpua/yii2-cropper

Release historydanger

The package has had no releases in the last 12 months, and its latest release was about nine years ago. Seventeen historical releases show prior activity but do not offset the prolonged release gap.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release hiatus and indicating little current maintenance capacity.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of an active user or contributor community. Popularity is not decisive alone, but it does not compensate for the maintenance gap.

Repo toolingcaution

Composer is used for builds, which is appropriate for a Packagist package, but no security scanning tools were found. This is a transparency and maintenance weakness rather than evidence of a security defect.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This matters more alongside the absence of recent maintenance.