szelepke/yii2-vuejs-assets

Release historydanger

The last release was on December 4, 2020, with no releases in the following 12 months and only three releases overall. This is a substantial maintenance gap for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing that development has stopped.

Package scaffoldingcaution

The package includes a README, but it is only 392 characters and contains no usage example; the absence of tests and a changelog is normal for a published PHP asset wrapper and is not penalized.

Repo toolingcaution

Composer is used as the build tool, which is appropriate, but no security scanning tools are configured. This is a hygiene gap that adds uncertainty rather than proving a defect.

Security policycaution

The repository has no security policy. For a small, dormant package this reduces transparency around reporting and handling vulnerabilities.