yii-ext/plupload

Release historydanger

There has been only one release, published about 12 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the package's long release gap. The repository is not archived, but that does not demonstrate current maintenance.

Licensecaution

The package has no declared license, detected license, or license file in the package or repository. That creates a genuine legal and transparency concern for adoption.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. This is a hygiene gap, though it is less significant than the lack of maintenance evidence.

Security policycaution

The repository has no security policy. For an old upload component, this leaves vulnerability reporting and maintenance expectations unclear.