loeken/phalcon-user-plugin

Release historydanger

The latest release was over 8 years ago, and there have been no releases in the last 12 months. This is strong evidence that the package is no longer actively maintained.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last 3 months. Combined with the old last push, this indicates very weak ongoing maintenance capacity.

Lifecycle scriptscaution

A post-update-cmd lifecycle script runs during dependency updates, adding some supply-chain and reproducibility exposure that consumers should understand.

Repo issue activitycaution

There were no new or merged pull requests and no issue activity in the last month. This is consistent with an inactive project, although the open-issue count is unknown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance weakness for a package handling authentication features.