sammaye/yii2-discourse-sso

Release historydanger

There has been only one release, published about 8 years and 9 months ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency that may need compatibility or security updates.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long-standing absence of releases. No compensating recent maintenance activity is shown.

Repo toolingcaution

Composer is used for the build, which supports reproducible package handling, but no security scanning tools are present. The missing scanning is a modest supply-chain hygiene gap.

Repository archivedcaution

The repository is not archived, which avoids a severe abandonment indicator, but its last push was about 8 years and 9 months ago and does not offset the inactive history.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities. This is a meaningful transparency gap for an authentication-related extension.