spicytuna8/yii2-ajaxcrud-bs5

Release historycaution

Only two releases exist, with the latest published about 15 months ago and none in the last 12 months. This limited and inactive release history raises maintenance uncertainty.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, despite the repository remaining unarchived. That is meaningful evidence of currently inactive maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This weakens automated oversight for a package with several runtime dependencies.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. The small scope may reduce exposure, but this remains a transparency gap.

Workflow auditcaution

The only workflow uses read-only permissions and has no reported dangerous audit findings, which is positive. However, both analyzed action references are unpinned, reducing build reproducibility and supply-chain assurance.