Only four releases and no release in over seven years leave little evidence of ongoing care. The stable version and small dependency set do not offset the package's abandoned status.
12%
Total Score
33
The registry marks the package abandoned at package scope and names phuongdev89/yii2-user-role as a replacement, making continued adoption a severe maintenance risk.
Only four releases exist, with none in the last 12 months; the latest release was over seven years ago, indicating prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dektrium/yii2-user Version @dev | — | — |
navatech/yii2-navatech-base Version @dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.