vjik/yii-validator-scenarios

Release historycaution

Only two releases exist, with no release in the last 12 months and a latest release in November 2024; this suggests slow maintenance, though a small stable package may not need frequent releases.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and raising abandonment risk.

Workflow auditcaution

The audit found an untrusted checkout in the pull_request_target workflow and all 17 action references are unpinned. The workflow has no script-injection finding and no top-level write permissions, so this is workflow hygiene caution rather than a severe risk.