arietimmerman/laravel-oauth-introspect-middleware

Licensedanger

The manifest declares MIT, but the bundled LICENSE.md is identified as AGPL-3.0. Although a license file exists, the mismatch creates a material legal and adoption risk until clarified.

Release historycaution

The latest release was published in January 2022, with no releases in the following 12 months covered by the signal. This indicates the package has not been refreshed for several years.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers over the last 3 months, consistent with the long release gap and raising abandonment concerns.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This matters for middleware involved in access-token verification.