The MIT license, release notes, and SECURITY.md make the package transparent to inspect. Its focused dependencies and clean install behavior help, but support for an authentication module is effectively unproven today.
42%
Total Score
25
50
75
100
The package has had no release in about 11 years: its latest release was April 16, 2015, despite four releases overall. This is strong evidence of abandonment for a dependency handling authentication.
There were zero commits and zero active maintainers in the past three months. Combined with the old latest release, this indicates no current maintenance capacity.
Seven runtime dependencies are substantial for a small authentication module, including installer, grid, file-input, and CAPTCHA components. They are relevant to the documented feature set, so this is a modest maintenance concern rather than a severe risk.
The repository is owned by an individual user rather than an organization, so the single registry maintainer is consistent with the project backing. That leaves limited visible succession capacity, but the ownership data alone is not a health verdict.
The repository has only 8 stars and 5 forks, providing limited evidence of broad review or community support. Popularity is supporting evidence rather than a verdict, but it offers little compensation for the maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version * | — | — |
kartik-v/yii2-grid Version dev-master | — | — |
abhi1693/yii2-installer Version * | — | — |
yiisoft/yii2-authclient Version ~2.0.0 | — | — |
kartik-v/yii2-widget-alert Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.