yii1tech/tagged-cache

Release historydanger

The package has only one release, published about three years ago, with no releases in the last 12 months. That leaves little evidence of continued maintenance for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. The repository is not archived, but there is no recent activity showing ongoing care.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, but it is less significant than the lack of recent release and commit activity.

Workflow auditcaution

The workflow audit completed fully and found no untrusted checkout, injection, or high-confidence audit findings. However, all three action references are unpinned, leaving a modest build reproducibility and supply-chain hygiene gap.