alchemy/oauth2php
The organization-owned repository remains available, and the release includes notes for its change. Its very small footprint offers little maintenance visibility, while the lack of security tooling and policy adds uncertainty for a dependency this old.
38%
Total Score
50
67
50
Health Score Breakdown
The package has only two releases, with no release in more than seven years and no releases in the last 12 months. This strongly indicates abandonment risk, despite its long age.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in January 2019. There is no provided maintenance evidence to offset this inactivity.
Neither the package nor the linked repository provides a declared license or license file. That creates a material adoption and redistribution concern.
Composer is used for project builds, which is appropriate, but no security-scanning tooling is present. This is a modest hygiene gap rather than evidence of unsafe behavior.
The repository has no security policy, leaving no documented route for reporting vulnerabilities. This is a transparency gap, though it is less significant than the long maintenance hiatus.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.