atmaliance/yii2-atm-keycloak-entity

Project backingcaution

The repository is owned by a user account rather than an organization, providing no visible organizational backing. This offers limited compensation for the single maintainer and inactive repository, but is not severe on its own.

Release historycaution

The package has six releases, but none in the last 12 months; the latest release was published in April 2024. This indicates a long maintenance gap despite an initially active release period.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap since April 2024. This materially raises the risk of abandonment.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not decisive, but these figures provide little supporting evidence of community use or review.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are configured. The missing scanning is a hygiene gap, not evidence that the package is unsafe by itself.