jext/yii2-jrbac

Licensecaution

The manifest declares MIT, while the artifact license file was detected as GPL-3.0. Because the declared and detected licenses disagree, the release has a meaningful licensing-transparency risk.

Maintainerscaution

Only one registry maintainer is listed, and the project backing identifies a user-owned repository rather than an organization. This leaves limited visible publishing and continuity capacity.

Release historycaution

The package has had no releases in the last 12 months, and its latest release was over two years ago. This indicates a materially slowed maintenance cadence despite its 13-release history.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the release gap, this is a clear maintenance and abandonment concern.

Repo popularitycaution

The repository has 1 star, 2 forks, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it provides little external evidence of maturity or review.