vaszloy/yii2-jwt

Release historydanger

The latest release was about four and a half years ago, with no releases in the last 12 months. Six releases show some initial history, but the prolonged gap is a substantial abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release hiatus and weakening confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a meaningful review and maintenance gap for an authentication-related library.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. The MIT license and linked source repository provide some compensating transparency, but not a security response process.