@openauthjs/openauth

Licensedanger

No declared license or license file was detected in the package, leaving developers without clear permission to use, modify, or redistribute it.

Release historydanger

The package has had no release in over 18 months, despite 61 releases overall and a very short historical median interval; this strongly suggests support has stopped.

Build provenancecaution

No build attestation or trusted publisher provenance was recorded, reducing publication transparency; this is a supporting concern rather than evidence of malicious behavior.

Package scaffoldingcaution

The published artifact has no README, which is a meaningful consumer-facing gap for a library; absent tests and changelog files are normal for published artifacts and are not penalized.

Version stabilitycaution

The package remains below 1.0, and all recent releases are marked prereleases, which indicates limited maturity even though this specific version is not itself a prerelease.