zhou-yang-young/yii2-xhprof

Release historydanger

This is the package's only release, published in June 2019, with no releases in the following seven years. That is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing that ongoing maintenance is not evident.

Licensecaution

The artifact contains a license file, but it is detected as Apache-2.0 while the manifest declares MIT. The package is licensed, yet the mismatch creates a transparency concern.

Maintainerscaution

Only one registry maintainer is listed, leaving a thin publishing base and limited apparent continuity if that maintainer becomes unavailable.

Repo package mentioncaution

The repository name matches the package, which supports ownership, but the README does not mention the package. This leaves some uncertainty about the repository-to-package relationship.