ash-rain/oauth2-server

The package has a substantial README, tests, changelog, declared BSD-3-Clause license, and a small runtime dependency set. Its maintenance and security visibility are too weak for a current OAuth server dependency.

Latest v0.3

Packagist

32%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in June 2015, and there have been no releases in the past 12 months. This long period without published updates is strong evidence of abandonment for a security-sensitive library.

Repo commit activity

The repository has recorded zero commits and zero active maintainers in the past 3 months, with its last push in June 2015. This confirms that the project is not receiving current maintenance.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these figures provide little evidence of community review or adoption to offset the lack of maintenance.

Repository archived

The linked repository is not marked archived, which is a positive administrative status. However, its last push was in June 2015, so this does not offset the observed inactivity.

Security policy

The repository has no security policy and no security scanning tools. For an OAuth 2.0 server, this leaves vulnerability reporting and security maintenance less transparent.