zhoyoung/yii2-xhprof

Release historydanger

The last release was published in June 2019, and there have been no releases in roughly seven years. This is strong evidence of abandonment for a package intended as an application dependency.

Repository archiveddanger

The repository is not archived, but it was last pushed in June 2019, roughly seven years ago. Its unarchived status provides little compensation for the prolonged lack of source updates.

Repo popularitycaution

The repository has 0 stars, 0 forks, and 0 watchers. Popularity is only supporting evidence, but these values provide no indication of an active user or contributor community.

Repo toolingcaution

Composer is used for builds, which is appropriate, but no security scanning tools are configured. This is a minor supply-chain hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, though it is secondary to the package's long period without updates.