yii2实现组件:后管用户管理
44%
Total Score
unhealthy
Risky: no release or commit activity since 2021, with limited security safeguards.
The package has had only two releases, with the latest published in December 2021 and none in the following four years. That long release gap is a substantial abandonment concern for a backend user component.
There were zero commits and zero active maintainers in the past three months, alongside a last repository push in 2022. This is the strongest evidence that maintenance has effectively stopped.
The component declares 12 runtime dependencies, including framework, queue, Redis, HTTP, and several related packages. This is a relatively broad dependency surface for a small component and increases compatibility and maintenance burden.
There are no open issues or pull requests and no recent activity. While a clean tracker can be positive, the absence of any recent issue or pull-request movement is consistent with the broader signs of inactivity.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little external evidence of maturity or community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ~2.0.14 | — | — |
qingbing/zf-helper Version ^1.0 | — | — |
yiisoft/yii2-queue Version ^2.3 | — | — |
yiisoft/yii2-redis Version ^2.0 | — | — |
qingbing/yii2-helper Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.