cottacush/yii2-user-auth

Release historydanger

The latest release was published in February 2021, with no releases in the last five years and a median interval of about 629 days. This is strong evidence of prolonged maintenance inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving current maintenance capacity un demonstrated.

Repo issue activitycaution

There is one open issue, but no new or closed issues or pull requests in the last month. This reinforces the picture of an inactive project, though the issue count itself is small.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The linked repository has no security policy, reducing the transparency of vulnerability reporting for an authentication package. The documented security section in the README provides limited compensation but no formal process.