What does this message mean in Composer, and why isn't yii2 fully updated?

Question

Yii

"minimum-stability" is set to "dev"
Yii2 is not fully updated after running "composer update --prefer-dist" command. For example, the app\vendor\yiisoft\yii2\base folder is not updated, the Security.php file does not appear

Answer 1

What does this message mean in Composer

That the package is abandoned and should be removed.

After executing the "composer update --prefer-dist" command, Yii2 is not completely updated. For example, the app\vendor\yiisoft\yii2\base folder is not updated, the Security.php file does not appear

Maybe that's how it should be?