voskobovich/yii2-auth-toolkit

Release historydanger

The package has had no release in over 10 years: its latest release was published in February 2016, with zero releases in the last 12 months. This is strong evidence of abandonment for a dependency receiving ongoing fixes.

Repo popularitycaution

The repository has 4 stars, 0 forks, and 1 watcher. This is limited supporting evidence of adoption and does not offset the long period without maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. The build setup is appropriate for the package, while the missing scanning coverage modestly lowers confidence.

Repository archivedcaution

The repository is not archived, which avoids the most severe abandonment signal, but it was last pushed in July 2016. Its inactive source history reinforces the lack of recent releases.

Security policycaution

The repository has no security policy. That is a transparency and vulnerability-reporting gap, although it is secondary to the much older release and source activity.