benjaminfavre/oauth2-http-client

Package scaffoldingcaution

The package artifact omits tests and a changelog, which is normal packaging practice; the repository does contain a changelog and publishes GitHub releases. The lack of repository tests is a modest quality concern, but not severe on its own.

Release historycaution

The package has five releases since April 2021, but none in the last 12 months; its latest release was about 14 months ago. This indicates slower maintenance for a library dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. Combined with the old last push, this is evidence of currently inactive development.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, despite four open pull requests. This suggests limited recent project responsiveness.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling is present. The missing scanning layer is a project-hygiene gap, though it does not by itself make the release unfit.