borisguery/oauth2-server

Latest 0.1

Packagist

40%

Total Score

unhealthy

Risky: no release or repository activity since April 2016, with only one early 0.1 release.

Health Score Breakdown

Release history

The package has only one release, published in April 2016, and none in the last 12 months. This is strong evidence of abandonment for a dependency released at version 0.1.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push being in April 2016. No newer activity compensates for this long dormancy.

Repo tooling

Composer is used as the build tool, but no security-scanning tooling is present. The missing scanning is a modest transparency gap, not evidence that the package is unsafe by itself.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a maintenance and transparency gap for an OAuth server library.

Version stability

The latest version remains 0.1 and is not a stable major release, indicating an immature API alongside the package's lack of subsequent releases.