aego/oauth2-mailru

It has a clear MIT license, tests, documentation, and a small dependency surface. Maintenance evidence is weak, with no recent commits and no release since 2017; the absent security policy adds a smaller transparency concern.

Latest 2.0

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The repository is owned by an individual account rather than an organization, and no broader project backing is shown. That leaves a relatively thin continuity model for a package with no recent release activity.

Release history

The latest release was about 9 years ago, and there have been no releases in the last 12 months. This is a substantial maintenance concern for a dependency, despite the package having four releases overall.

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Combined with the old latest release, this indicates weak current maintenance capacity.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with one issue still open. This is limited activity rather than proof of abandonment, but it provides little evidence of active support.

Repo popularity

The repository has 3 stars and 3 forks, so community adoption and external review are limited. Popularity is supporting evidence only and does not by itself make the package unsafe to depend on.