thefx/yii2-blocks

Release historydanger

Only two releases were published, both in July 2023, with no release in the following three years. This is strong evidence of abandonment risk for a package intended as an application dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months. Combined with the long release gap, this suggests maintenance has effectively stalled.

Dependency profilecaution

The package declares 12 runtime dependencies, including several application-specific extensions and UI components. This creates a relatively broad compatibility and maintenance surface for a small package.

Repo toolingcaution

Composer is used as the build tool, which is appropriate for this PHP package, but no security scanning tools are present. That leaves dependency and repository hygiene less independently checked.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a package containing controllers, uploads, migrations, and administrative functionality.