voodoo-rocks/yii2-pushes

Release historydanger

The latest release was published in November 2016, with no releases in the last 12 months and only two releases overall. This is strong evidence of abandonment for a dependency that may need compatibility or security maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long-stalled release history. No provided maintenance signal compensates for this lack of recent activity.

Package scaffoldingcaution

The package includes a README, but it is only 15 characters long; absent tests and a changelog are normal for published artifacts and are not concerns by themselves. The extremely limited consumer documentation is still a minor transparency gap.

Repo package mentioncaution

The repository name matches the package, which supports the linkage, but the README does not mention the package. This weakens repository transparency slightly without suggesting the repository is unrelated.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are present. This reduces evidence of ongoing supply-chain hygiene, though it does not by itself show unsafe behavior.