simialbi/yii2-kanban

Release historydanger

The package has 56 releases since October 2019, but its latest registry release was over four years ago and there were no releases in the last 12 months. This is a substantial maintenance concern despite the historically regular release cadence.

Dependency profilecaution

The package declares 17 runtime dependencies, including several Yii extensions and frontend assets. This broad dependency surface increases upgrade and transitive-maintenance exposure for adopters.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. That suggests current development has stalled, although the repository was pushed recently enough that complete abandonment is not established.

Security policycaution

The linked repository has no security policy. That weakens the project's stated process for receiving and documenting vulnerability reports, though it is not evidence of a vulnerability by itself.

Workflow auditcaution

The only workflow was fully analyzed and has no dangerous triggers, untrusted checkouts, or audit findings, but all 5 action references are unpinned. The lack of a top-level permissions block is acceptable on its own, while unpinned actions reduce build reproducibility and supply-chain hygiene.