dimanzver/yii2-jwt

Release historydanger

The package has made no release in more than four years: all 13 releases were published in March 2022, with none in the last 12 months. This is strong evidence of stalled maintenance for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance activity.

Maintainerscaution

Only one account has registry publishing access. That is a limited support base, although the repository and registry are tied to the same individual, so it is not evidence of an ownership mismatch.

Security policycaution

The repository has no security policy, reducing transparency around vulnerability reporting and response. This matters for a package handling JWT authentication.