oauth-sign

Release historycaution

The package has 10 releases since 2013, but its latest release was about eight years ago and there have been no releases in the last 12 months. This is strong evidence of a mature or abandoned release line, with little indication of current maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old release, this is the main reason to treat the package as weakly maintained.

Repo issue activitycaution

There are three open issues and three open pull requests, but none were created, closed, or merged in the last month. This suggests limited current project activity.

Repo toolingcaution

The repository has no build tooling or security scanning configured. For this small four-file JavaScript package that is not inherently unsafe, but it provides little ongoing maintenance or security-process support.

Repository archivedcaution

The repository is not archived, but it was last pushed about six years ago. The unarchived state is reassuring, while the long period without updates supports a maintenance concern.