uzdevid/yii2-jwt-auth

Risky to depend on: this package has had no release or repository activity since July 2023, and the repository has no tests or security policy. It is small and clearly linked to its package, but the lack of maintenance evidence makes adoption a liability.

Latest 1.0.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published more than three years ago, with no releases in the last 12 months. This is strong evidence of limited ongoing maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive since its initial release. No provided signal compensates for this maintenance gap.

Package scaffolding

The package includes a README entry, although it is empty; missing tests and a changelog in the published artifact are normal packaging practice. The repository also has no tests or changelog, which weakens project transparency for a library consumers must integrate.

Repo popularity

The repository has zero stars, forks, and watchers, providing no supporting evidence of community use or external review. Popularity is only supporting evidence, so this reinforces rather than determines the concern.

Repo tooling

Composer is used for the build, providing basic project tooling, but no security-scanning tools are configured. This is a modest transparency and maintenance concern rather than a severe risk by itself.