ddruganov/yii2-api-auth

Licensedanger

No license is declared, and neither the package nor the linked repository contains a license file. That creates a material adoption and redistribution risk.

Release historydanger

The package has had no release in more than four years, with 0 releases in the last 12 months. This is strong evidence of abandonment for a dependency that may need fixes.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the release gap and indicating no observable ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This modestly weakens assurance for a package handling authentication and tokens.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, especially for authentication software.