denchotsanov/yii2-user

Release historydanger

The package has only three releases, all concentrated in June 2019, with no release in more than six years. That strongly suggests the dependency is no longer actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating little current maintenance capacity.

Dependency profilecaution

The package declares seven runtime dependencies, including Yii2 and related authentication, mailer, and bootstrap components. This is a noticeable dependency surface but is coherent with the module's stated functionality.

Maintainerscaution

Only one registry maintainer is listed, leaving the package dependent on a thin publishing base. The linked repository is user-owned rather than organization-backed, so there is no shown organizational cushion.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. This is a meaningful hygiene gap for a package handling accounts and authentication.