zhangdi/yii2-env

Release historydanger

The package has had only two releases, both in August 2019, with no release in roughly 7 years. This strongly indicates abandonment risk despite the absence of registry deprecation.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and providing no evidence of ongoing maintenance.

Maintainerscaution

A single registry maintainer is a limited publishing base for a user-owned project, increasing bus-factor and continuity risk. The linked repository confirms the same individual owns the project, so this is not merely an administrative-list artifact.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less severe than the lack of recent maintenance.