Package Health

abhi1693/yii2-user

The MIT license, release notes, and SECURITY.md make the package transparent to inspect. Its focused dependencies and clean install behavior help, but support for an authentication module is effectively unproven today.

Latest v0.0.4PackagistPackagist

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historydanger

The package has had no release in about 11 years: its latest release was April 16, 2015, despite four releases overall. This is strong evidence of abandonment for a dependency handling authentication.

Repo commit activitydanger

There were zero commits and zero active maintainers in the past three months. Combined with the old latest release, this indicates no current maintenance capacity.

Dependency profilecaution

Seven runtime dependencies are substantial for a small authentication module, including installer, grid, file-input, and CAPTCHA components. They are relevant to the documented feature set, so this is a modest maintenance concern rather than a severe risk.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single registry maintainer is consistent with the project backing. That leaves limited visible succession capacity, but the ownership data alone is not a health verdict.

Repo popularitycaution

The repository has only 8 stars and 5 forks, providing limited evidence of broad review or community support. Popularity is supporting evidence rather than a verdict, but it offers little compensation for the maintenance gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Abhimanyu Saharan

Direct Dependencies

DependencyLast ReleaseScore
yiisoft/yii2
Version *
—
—
kartik-v/yii2-grid
Version dev-master
—
—
abhi1693/yii2-installer
Version *
—
—
yiisoft/yii2-authclient
Version ~2.0.0
—
—
kartik-v/yii2-widget-alert
Version *
—
—

Weekly Downloads

Info

Last Published
11 years ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform