sam-it/yii2-abac

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the measured three-month period, consistent with more than four years without a new release. This is the strongest evidence of abandonment risk, although the repository is not archived.

Release historycaution

The latest release was published on May 10, 2022, and there were no releases in the following 12 months of the measured period. Seven releases over roughly two and a half years show an established history, but the long subsequent gap lowers maintenance confidence.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though the presence of Psalm provides some compensating security tooling.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injections, or audit findings, and it does not use broad top-level write permissions. However, all seven action references are unpinned, leaving workflow inputs less reproducible and increasing update risk.