stepancher/yii2-content-module

Release historydanger

The package has had only two releases, both in April 2015, with no release in the last 11 years. This is strong evidence of abandonment for a dependency expected to receive maintenance.

Repo commit activitydanger

The repository has recorded no commits and no active maintainers in the last three months, while its last push was in April 2016. The long absence of development materially raises maintenance risk.

Repo popularitycaution

The repository has only 2 stars and 3 forks, providing little evidence of a broad user or contributor base. Popularity is supporting evidence rather than decisive on its own, but it offers little compensating confidence here.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a modest hygiene concern for a package that has otherwise seen no recent maintenance.

Security policycaution

The repository has no security policy, leaving no documented channel or process for handling vulnerability reports. This is a transparency and maintenance gap, though it is less severe than the lack of recent development.