tsanchev/yii2-lightbox2

Release historycaution

The latest release was over four years ago, with no releases in the last 12 months. This indicates prolonged inactivity, although the package may be mature and stable.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the last push being in January 2022. This is the strongest evidence of stagnant maintenance.

Repo popularitycaution

The repository has one star and no forks, providing little community validation or evidence of a broad maintenance base. Popularity is supporting evidence rather than decisive on its own.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. For a small asset package this is a modest transparency and oversight gap.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.