clement/yii-rest-rbac

The license metadata conflicts with the GPL-3.0 license file, and the manifest lists the package itself as a runtime dependency. Documentation and repository tests provide some support, but the maintenance and licensing concerns remain substantial.

Latest 2.0.4

Packagist

38%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in June 2018, and there have been no releases in the last 12 months. This long release gap is strong evidence of abandonment for a package used in application authorization.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, matching the long release gap and providing no evidence of current maintenance.

Dependency profile

The package declares clement/yii-rest-rbac itself as a runtime dependency, which is an unusual and potentially erroneous dependency graph entry. The other runtime dependency count is small, but it does not explain this self-reference.

License

The manifest declares MIT, but the artifact license file is recognized as GPL-3.0. Although a license file exists, the mismatch creates a material legal uncertainty for adopters.

Security policy

The linked repository has no security policy. This is a transparency and maintenance gap for a package handling authentication and role-based access control, though it is not evidence of malicious behavior.