maddoger/yii2-user

It has a readable installation guide and a small dependency set. The project has been untouched for about 11 years, with no license or security policy to clarify ongoing support and use.

Latest v1.0.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

Neither the package nor the linked repository declares or contains a recognized license file. This creates a direct transparency and adoption risk for a dependency.

Release history

This is the package's only release, published about 11 years ago, with no releases in the last 12 months. That leaves compatibility and maintenance risk for a framework extension.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the repository having been untouched since its 2015 release. This materially increases abandonment risk.

Repo popularity

The repository has zero stars, one fork, and two watchers. Popularity is not decisive, but these very limited signs provide little supporting evidence of community review or continued use.

Repo tooling

Composer is used as the build tool, but no security scanning tools are present. For a package handling authentication and user management, the lack of scanning weakens maintenance assurance.