shortcutmediaro/yii2-cart

Licensedanger

No license is declared and no license file was detected in the package or repository. This creates a material adoption and redistribution risk.

Release historydanger

The package has only one release, published in May 2015, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency released over 11 years ago.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the single-release history, this materially increases abandonment risk.

Project backingcaution

The repository is owned by a personal user account rather than an organization. This provides no visible organizational backing to compensate for the thin maintenance evidence.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of community support.