xj/yii2-nivoslider-widget

Release historydanger

Only two releases were published, with the latest in March 2015 and none in the last 12 months. A release gap of more than 11 years is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, and its last push was in November 2017. This confirms that maintenance has been inactive for more than 8 years.

Licensecaution

A license file is present, so the release is licensed, but it identifies MIT while the manifest declares BSD-3-Clause. The mismatch reduces licensing transparency for adopters.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.

Security policycaution

The repository has no security policy. For a small, old widget this is a secondary gap, but it provides no clear path for reporting future vulnerabilities.