yii-extension/asset-tailwind

Release historydanger

This is the package's only release, published over three years ago, with no releases in the last 12 months. That materially raises abandonment and compatibility risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived, but current maintenance activity is absent.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package. Although subpackages can use monorepos, this leaves package-to-repository ownership less transparent.

Security policycaution

The repository has no security policy. This is a modest transparency gap for reporting vulnerabilities, but the package's clear license, tests, and dependency tooling partly compensate.

Workflow auditcaution

All four workflows were analyzed with no audit findings or untrusted sinks, but all four action references are unpinned. That leaves avoidable workflow supply-chain exposure, without evidence of an active exploit path.