xz1mefx/yii2-multilang

Release historydanger

The package is about 9 years old but has had no release in roughly 9 years; its nine releases were concentrated in the initial weeks, with none in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no activity since 2017. The repository is not archived, but that does not compensate for the prolonged inactivity.

Repo popularitycaution

The repository has only 4 stars, 0 forks, and 4 watchers, providing little evidence of a community that could help maintain or replace the package. Popularity is supporting evidence rather than decisive on its own.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance gap, though it is less serious than the prolonged inactivity.