2amigos/yii2-usuario

The repository has had no commits in the past three months, and all four workflow actions are unpinned. Clear licensing, tests, release notes, and an active unarchived repository provide useful safeguards, but maintenance appears slow.

Latest 1.6.3

Packagist

62%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 28 releases since June 2017, but none in the past 12 months and its latest release was about 2 years 6 months ago. This points to materially reduced release activity for a library with ongoing maintenance needs.

Repo commit activity

There were zero commits and zero active maintainers in the past three months. This is a meaningful maintenance concern, although the repository is not archived.

Repo issue activity

The repository has 103 open issues and 12 open pull requests, with no issues or pull requests closed in the past month. This suggests unresolved maintenance backlog.

Security policy

No repository security policy was found. This is a transparency gap for a package handling authentication, authorization, and user data, though it does not by itself show unsafe code.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 4 action references are unpinned, leaving avoidable supply-chain drift risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

2amigOS! Consulting Group

Antonio Ramirez Cobos

Direct Dependencies

Dependency	Last Release	Score
yiisoft/yii2-bootstrap Version ^2.0	—	—
yiisoft/yii2-authclient Version ^2.1	—	—
yiisoft/yii2-httpclient Version ^2.0	—	—
2amigos/yii2-selectize-widget Version ^1.1	—	—
yetopen/yii2-sms-sender-interface Version ^0.1.1	—	—