pascini/yii2-rbac

The MIT license, matching repository, and documented package structure improve transparency. However, maintenance has stopped since 2021, and the project explicitly says it is abandoned; the lack of security scanning adds another concern.

Latest 1.0.3

Packagist

30%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The README explicitly states that the project has been abandoned, which is direct evidence against ongoing maintenance. The package does include a README and changelog, while the absence of tests is normal packaging practice and does not offset the abandonment notice.

Release history

The latest release was in November 2021, with no releases in the last 12 months. Seven releases show some initial publishing history, but the long period without a release materially raises abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the README's abandonment notice. This leaves little evidence of current maintenance capacity.

Repo popularity

The repository has zero stars, forks, and watchers, providing no supporting evidence of an active user or contributor community. Popularity is only supporting evidence, so this reinforces rather than determines the maintenance concern.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. This limits automated assurance, although it is secondary to the stronger abandonment evidence.