yii2-starter-kit/yii2-file-kit

Release historycaution

The package has existed for nearly eight years with 30 releases, but only one release in the last 12 months indicates a slow cadence. The recent 2026 release provides some evidence of ongoing publication, so this is a caution rather than a severe abandonment signal.

Repo commit activitycaution

There were no commits and no active maintainers during the last three months. Although a recent release shows some publication activity, the current development pause raises maintenance risk.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools are configured. This is a transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but its one action reference is unpinned. The missing top-level permissions block is acceptable on its own and does not offset the pinning gap.