vova07/yii2-users-module

Release historydanger

The latest release was published in February 2015, with no releases in about 11 years and none in the last 12 months. This is strong evidence of abandonment risk, although the package is not marked deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. There is no provided evidence of current maintenance capacity.

Dependency profilecaution

Five runtime dependencies, including two other packages from the same publisher, increase the number of components that must remain compatible and maintained. The profile is not excessive, but it adds some upkeep risk for an already stale package.

Repo toolingcaution

The repository uses Composer but reports no security scanning tools. That leaves dependency and code issues less likely to be caught automatically.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is secondary to the maintenance concerns.