tonisormisson/yii2-json-form

Licensecaution

Neither the package metadata nor the linked repository contains a declared or detected license file. That creates a material legal and transparency gap for a dependency.

Maintainerscaution

Only one registry publishing maintainer is listed, and the project backing is an individual account rather than an organization. This leaves a thin apparent maintainer base if that person becomes unavailable.

Release historycaution

The latest release was published in April 2024, with no releases in the following roughly two years and five months. Its 27-release history shows prior activity, but the current pause lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the extended release gap. This indicates little recent maintenance capacity.

Repo toolingcaution

Composer is used for builds, which is appropriate for this PHP package, but no security scanning tooling is present. The missing scanning is a modest transparency gap rather than evidence of a defect.