collecthor/yii2-session-auth

Release historydanger

The latest release was on September 23, 2022, and there have been no releases in the last 12 months despite the package being over four years old. This materially raises abandonment risk, although the package is not deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no observed recent maintenance.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of community adoption or support.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a meaningful but limited concern for a small package with security-scanning tooling present.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all five action references are unpinned. That leaves avoidable build-integrity exposure without evidence of an active exploit path.