bgi-online/oauth2-server-php

Release historydanger

The package has 21 releases but none in the last 12 months, and its latest release was in May 2017. This long period without a new release is strong evidence of abandonment risk.

Repo commit activitydanger

There were zero commits and zero active maintainers during the last three months. Combined with the old last push, this indicates a project with no observed current maintenance capacity.

Project backingcaution

The repository is owned by a user account rather than an organization, so the available backing signal does not show organizational maintenance capacity. This adds context to the thin maintenance evidence but is not a standalone failure.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no published security policy. For an OAuth2 server library, that makes vulnerability reporting and maintenance expectations less clear.