maximkozhin/yii2-user

Release historydanger

Only one release exists, published over nine years ago, with no releases in the last 12 months. This is strong evidence that the package is no longer actively maintained.

Repo commit activitydanger

The repository has had zero commits and zero active maintainers in the last three months, and its last push was in May 2017. The long-term inactivity materially raises abandonment risk.

Maintainerscaution

One individual has registry publishing access. That is not inherently unhealthy for a small package, but it provides limited maintenance capacity when combined with the absence of recent releases and commits.

Repo popularitycaution

The repository has zero stars and zero forks, with one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of an active user or contributor community.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tooling is present. This is a modest supply-chain hygiene gap rather than a severe risk by itself.