jlorente/yii2-roles

Release historydanger

The package has had only three releases, all clustered in July 2017, and none in the last nine years. That strongly suggests the project is no longer actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push being in October 2017. The long absence of development creates substantial abandonment risk.

Maintainerscaution

Only one registry maintainer is listed, leaving publishing and project continuity dependent on a single person. The linked repository is also owned by an individual rather than an organization, so no broader backing is shown.

Repo popularitycaution

The repository has one star and no forks, providing little evidence of a broad user or contributor community that could help sustain it. Low popularity is supporting evidence rather than a concern by itself, but it reinforces the maintenance risk.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This matters more for an access-control extension that may sit in an application's authorization path.