passport-oauth2

Build provenancecaution

No build attestation or trusted-publisher provenance is available, limiting release transparency, although this is not evidence of a faulty release by itself.

Release historycaution

The package has a long history and 12 releases, but it has had no release in more than two years and none in the last 12 months, which raises maintenance concerns.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, consistent with the long release gap and indicating currently quiet maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 72 issues and 24 pull requests remain open; this suggests limited recent project activity.

Repo toolingcaution

The repository uses a build tool, but no security scanning tools were detected, leaving a modest security-process gap.