stesi/yii2-upload-behavior

Release historydanger

The package has had no releases in more than eight years: its latest release was December 21, 2017, despite having ten releases overall. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no recent maintenance.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools are configured. That weakens supply-chain oversight, though it does not by itself show unsafe code.

Security policycaution

The linked repository has no security policy, leaving consumers without a documented channel or process for reporting vulnerabilities. This adds a transparency gap, especially for an upload-handling library.