aminkt/yii2-oauth2

Release historydanger

The package has had only three releases since August 2019, with no releases in the last 12 months; its latest release was about five years ago. This is strong evidence of stagnation, despite the package not being deprecated.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the repository having been inactive for about five years. This materially increases abandonment risk.

Package scaffoldingcaution

The artifact includes a README and this version has GitHub release notes, documenting the release at least minimally. The README is only 13 characters long, which leaves important consumer guidance unclear.

Repo popularitycaution

The repository has zero stars and forks and one watcher, providing little evidence of community adoption or external review. Popularity is supporting evidence only, so this reinforces rather than determines the maintenance concern.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool is configured. The missing scanning is a hygiene gap rather than evidence that the release is unsafe by itself.