zander-84/yii2-components

Release historydanger

The package has had one release, on August 14, 2019, with no releases in the last 12 months. That long period without updates is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. No provided maintenance signal compensates for this inactivity.

Package scaffoldingcaution

The artifact includes a README, which provides minimal consumer guidance, but it is only 15 characters. The absence of tests and a changelog in the published artifact is normal packaging practice and is not treated as a gap.

Repo popularitycaution

The repository has zero stars and forks and one watcher. This provides little supporting evidence of community review, though popularity alone is not decisive for a small package.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are present. The missing scanning is a modest hygiene concern rather than evidence of malicious behavior.