sherinbloemendaal/yii2-jwt

Maintainerscaution

One registry maintainer is consistent with the repository being owned by an individual, but it leaves little visible publishing redundancy if that person becomes unavailable.

Release historycaution

Only two releases were published, and none appeared in the last 12 months; the latest release was about 15 months ago. This indicates a real maintenance concern despite the initially short five-day release interval.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long gap since the latest release. This raises abandonment risk for a security-sensitive authentication library.

Security policycaution

No repository security policy was found. For a JWT authentication package, this is a transparency gap because users lack a documented channel and process for reporting vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all five action references are unpinned, leaving the workflow exposed to upstream action changes.