vitprog/yii2-angular-timeago

Release historydanger

The package has had only two releases, with none in the last 12 months, and the latest registry release dates to November 2015. This indicates severe abandonment risk despite the short early release interval.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push in 2015. This strongly increases abandonment risk.

Licensecaution

The manifest declares BSD-3-Clause and a LICENSE file is present, but the artifact license text was detected as GPL-3.0. This mismatch needs clarification before adoption.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. For a small package this is a meaningful transparency and maintenance gap, though not evidence of maliciousness.

Security policycaution

The repository has no security policy. This limits reporting and maintenance transparency, especially alongside the long period without project activity.