8xprovn/imap_oauth2_v2

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past 3 months. Combined with the old last push relative to the scan, this weakens evidence of ongoing maintenance.

Licensecaution

The manifest declares the package proprietary, with no recognized license text or license file in the artifact or repository. This provides a legal declaration but is a material concern for an open-source dependency.

Package scaffoldingcaution

The artifact has no README, tests, or changelog, although release notes exist for version 5.0.3 and the repository uses GitHub releases. The missing README is a meaningful gap for a PHP library consumers must integrate against.

Release historycaution

The package has 17 releases in 340 days, but the median interval is about 30 minutes, indicating releases were heavily clustered rather than demonstrating a steady cadence.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security-scanning tools are configured. That leaves dependency and source issues less likely to be detected automatically.