buddysoft/yii2-api

Maintainerscaution

Only one account has registry publish access. For this user-owned project, that represents a thin publishing and continuity base, especially alongside the lack of recent activity.

Release historycaution

The package has had no releases in more than three years, despite seven releases overall. This is a meaningful maintenance and abandonment concern, though the stable 1.1.1 release may still be sufficient for a small focused library.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last push and release, this materially raises abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a security-process hygiene gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a library exposing API controllers and authentication-related behavior, this reduces transparency around vulnerability reporting and maintenance response.