yiiplus/scaffold

Release historydanger

The package has had no release in nearly seven years, with zero releases in the last 12 months. That strongly increases abandonment risk for a dependency, despite five historical releases.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with a repository that has been inactive for years. This is strong evidence of abandonment risk.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. That is a transparency and maintenance gap, though it is less significant than the prolonged inactivity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This adds a real transparency concern for a framework scaffold.