solutosoft/yii-audit-record

Release historycaution

The package has had 9 releases since July 2019, but none in the last 12 months and its latest release was in March 2022. This long release gap is a meaningful maintenance concern.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, consistent with the absence of releases since March 2022. This is the strongest evidence of possible abandonment.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. The missing scanning is a hygiene gap, though it is less significant than the long maintenance pause.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, especially for a package that records application data, but it is not by itself evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no detected high-confidence findings or untrusted checkouts, but all 3 action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions remain a modest reproducibility and workflow-integrity concern.