hiqdev/yii2-mfa

Release historydanger

The latest registry release was in October 2017, nearly nine years before this assessment, with no releases in the last 12 months. That materially raises abandonment and version-freshness concerns.

Repo bus factorcaution

All recent commit activity came from one contributor. Organization backing provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months. This shows some current activity, but it is too sparse to demonstrate a strong maintenance cadence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. For an authentication-related package, that is a meaningful hygiene gap.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities in a package that implements multi-factor authentication.