api-skeletons/oauth2-doctrine

Release historycaution

The package has only four releases since March 2020, with no releases in the last 12 months and a median interval of about 565 days. This indicates a slow release cadence and lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with no registry releases in the last year, this is a real maintenance concern, though the repository was pushed in March 2025.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. This reduces transparency around vulnerability reporting but is not by itself evidence of abandonment.

Workflow auditcaution

All three workflows were analyzed without detected audit findings or untrusted checkouts. However, all 10 action references are unpinned, so workflow dependencies can change unexpectedly over time.