wearesho-team/yii2-monitoring-fs

Release historycaution

The package has only three releases since February 2019, with no releases in the last 12 months and a median interval of about 2.9 years. This suggests slow maintenance, though the latest release is relatively recent and stable.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Combined with the long release interval, this is a meaningful sign of currently limited maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a small library this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it is less significant for this small, organization-backed package than evidence of abandonment would be.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, and it has no top-level write permissions. However, all four action references are unpinned, leaving avoidable update and provenance risk.