devmastersbv/yii2-jwt

Release historydanger

The latest release was in November 2016, and there have been no releases in the last 12 months. This is strong evidence of abandonment for a library handling authentication.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap and offering no evidence of current maintenance.

Repo popularitycaution

The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not decisive by itself, but this provides no supporting evidence of community review or adoption.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. The missing scanning is a modest hygiene gap and does not outweigh the package's maintenance concerns.

Security policycaution

The repository has no security policy, leaving no documented route for reporting vulnerabilities. That is a meaningful transparency gap for JWT authentication software, especially alongside the lack of recent maintenance evidence.