ahoicloud/oauth2-client

Usable with caveats: the package is clearly identified, licensed, tested, and has a clean dependency profile, but its last release was nearly nine years ago and repository activity stopped over five years ago. Depend on it only if the stable, narrow integration still meets your needs and you can maintain it yourself.

Latest 1.1.1

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has five releases, but none in the last 12 months; version 1.1.1 was released nearly nine years ago. This is a substantial maintenance and abandonment concern for a library dependency.

Repo commit activity

There were no commits or active maintainers in the last three months, consistent with a project that has been inactive for years. This materially raises the risk that defects or compatibility changes will not be addressed.

Repo popularity

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these very low figures provide little external evidence of ongoing use or review.

Repo tooling

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a transparency gap, although this small package has no reported workflow activity to expose.

Repository archived

The linked repository is not archived, but it was last pushed over five years ago. The non-archived status is reassuring, though it does not offset the lack of recent activity.