exzm/yii2-jwt

Clear source coverage, a substantial README, repository tests, and a stable release offset the limited maintenance evidence. No commits or active maintainers were recorded in the last three months, and the project has no security policy or scanning tools.

Latest v4.0.1

Packagist

62%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package has four declared runtime dependencies, including Yii2 and lcobucci/jwt, which is a manageable profile. PHPUnit being listed as a runtime dependency rather than a development dependency is a minor packaging concern.

Project backing

The repository is owned by a user account rather than an organization. This does not establish a problem by itself, but it provides less visible institutional backing.

Release history

The package made 14 releases within its first day, but no later release is shown over the following 296 days. This is a short, bursty history rather than evidence of sustained maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. For a package only about 296 days old, that is meaningful evidence of quiet maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.