getpu/yii2-user

Release historydanger

This package has made only one release, with no releases in the last 10 years. That is strong evidence of abandonment for a framework integration package.

Repo commit activitydanger

The repository recorded no commits or active maintainers in the last 3 months, consistent with the long release gap and indicating little current maintenance.

Licensecaution

License files are present, so the release is licensed, but the artifact detects MIT while the manifest declares BSD-3-Clause. That mismatch reduces legal clarity.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no visible community signal to offset the maintenance concerns.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap rather than evidence that the package is unsafe.