hiqdev/yii2-hiam-authclient

Release historydanger

There has been only one release, published about 10 years ago, with no releases in the last 12 months. Recent repository activity partly offsets this, but the consumed registry release itself is very stale.

Repo bus factorcaution

All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second recently active contributor is shown to reduce concentration risk.

Repo commit activitycaution

The repository had 1 commit in the last 3 months from 1 active maintainer, showing some current activity but very limited maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The build setup is established, while security-process coverage remains limited.

Security policycaution

The linked repository has no security policy, leaving reporting and response expectations undocumented. This is a transparency gap rather than evidence of unsafe code.