xutl/yii2-plupload-widget

Release historydanger

The package has only two releases, and its latest release was in April 2017; there have been no releases in roughly nine years. This is strong evidence of abandonment for a dependency that may need ongoing compatibility fixes.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.

Maintainerscaution

Only one account has registry publishing access. The linked repository is user-owned rather than organization-backed, so there is little visible publishing redundancy if that maintainer stops supporting the package.

Repo popularitycaution

The repository has zero stars, forks, and watchers, offering no supporting evidence of an active user or contributor community. Popularity is secondary, but it provides no compensation for the inactivity.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, although it does not by itself show that the package is unsafe.