aboutyou/auth-sdk

The package has a clear README, changelog, small dependency surface, and organization backing. Its source and release history have been inactive since December 2014, with no security policy or scanning tools to offset the abandonment concern.

Latest 0.3.7

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in December 2014, and there have been no releases in the past 12 months. Thirteen releases show some historical activity, but the long-standing pause is a substantial maintenance concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the last push occurring in December 2014. The inactive source provides no evidence of ongoing maintenance.

Repo popularity

The repository has one star, two forks, and one watcher, indicating very limited adoption. Popularity is supporting evidence only, but these low figures provide little external confidence for an otherwise inactive project.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a modest hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. This is a transparency and maintenance gap, especially for an authentication SDK, and no provided signal shows that security reporting is handled elsewhere.