shanwker1223/yii2-jwt

Release historydanger

The package has had only two releases, both published in September 2022, and none in the following four years. This strongly suggests abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the four-year release gap. No provided maintenance signal compensates for this inactivity.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no supporting evidence of community use or review. Popularity is only supporting evidence, so this reinforces but does not independently establish abandonment.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance concern for an authentication-related package.