skeeks/yii2-tagsinput

Release historydanger

The package is nearly ten years old, with five releases but none in the last 12 months; its latest release was in November 2016. This is strong evidence of abandonment risk despite an initially regular release interval.

Repo commit activitydanger

There were zero commits and zero active maintainers in the measured three-month period, consistent with the much older last push and indicating no current maintenance capacity.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer provides limited visible backing for long-term continuity.

Repo popularitycaution

The repository has zero stars, one fork, and one watcher. Low popularity is supporting caution rather than a verdict, but it provides little external evidence of ongoing community support.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a hygiene gap, while the package's much older inactivity remains the larger concern.