xpbl4/yii2-import-export

Licensecaution

A license file is present, but the manifest declares MIT while the artifact license file is detected as BSD-3-Clause. The package is licensed, but the conflicting declarations reduce transparency.

Release historycaution

The package has had only one release, with the latest published about four years ago and none in the last 12 months. This is strong evidence of limited ongoing maintenance, though the repository remains available.

Repo commit activitycaution

The repository recorded no commits or active maintainers in the last three months, reinforcing the long release gap and increasing abandonment risk.

Security policycaution

The repository has no security policy, leaving no documented channel or process for handling vulnerability reports. This is a moderate transparency gap for a package used to process imported data.