smavantel/yii2-graph

Maintainerscaution

One registry maintainer is a thin publishing base for a personal project, so continuity depends heavily on one person. The repository owner is the same individual, which confirms ownership but does not add maintenance capacity.

Release historycaution

This is the only release, published about three years and eight months ago, with no releases in the last 12 months. That is substantial evidence of limited maintenance, though the repository was pushed more recently.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, despite the repository's recorded push in January 2026. The recent inactivity weakens evidence that the project is actively maintained.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is configured. For a package handling Microsoft Graph integration, that leaves a modest gap in ongoing project hygiene.

Security policycaution

The repository has no security policy, so there is no documented route for reporting or handling vulnerabilities. This is a transparency weakness, though not severe enough to make the release unfit by itself.