Package Health/esp4ik/yii2-authclient-extended

esp4ik/yii2-authclient-extended

Risky to adopt: the package has had no release or repository activity for about eight years, with no active maintainer activity. It is small, clearly packaged, licensed, and not deprecated, but its maintenance risk is substantial.

Latest 1.1.1

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in February 2018, and there have been no releases in about eight years. Only three releases were published overall, indicating a mature-looking version but very limited ongoing maintenance.

Repo commit activity

The repository has recorded no commits and no active maintainers in the last three months, consistent with the roughly eight-year gap since the last push. This is strong evidence of abandonment risk.

Maintainers

One registry account has publish access. This is not evidence of current activity by itself, and the project-backed repository is user-owned rather than organization-owned, so the small maintainer base adds some continuity risk.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these numbers provide little evidence of a broad or active user community.

Repo tooling

The repository uses Composer for its build and dependency workflow, but has no detected security scanning tools. The missing scanning is a modest transparency gap, not a severe risk for this small package.