Package Health

sizeg/yii2-jwt

The repository matches the package, includes source tests, and provides release notes and a substantial README. The beta status, missing security safeguards, and lack of recent maintenance make this a dependency to pin carefully.

Latest v4.0-betaPackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package has had no releases in the last 12 months, and its latest release was in December 2022, about 3 years and 9 months ago. This materially raises abandonment risk.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months, which supports the concern that maintenance has slowed substantially.

Repo issue activitycaution

There were no new or closed issues and no merged pull requests in the last month, indicating little current project interaction.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving an avoidable transparency and maintenance gap.

Security policycaution

The repository has no published security policy, so there is no clear documented process for reporting or handling security issues.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Dmitriy Demin

Direct Dependencies

DependencyLast ReleaseScore
lcobucci/jwt
Version ~4.2.1
—
—
yiisoft/yii2
Version ~2.0.0
—
—
phpunit/phpunit
Version ^9.5
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform