yurkinx/yii2-image

Release historycaution

The package has only four releases and none in the last 12 months; its latest registry release was in April 2019. This is a meaningful maintenance concern, although the repository was pushed more recently.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, indicating no current development activity. This reinforces the risk suggested by the old registry release.

Repo toolingcaution

Composer is used for the build, which is appropriate for this PHP package, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and handling undocumented. This is a hygiene gap rather than evidence that the package is unsafe.