c4wlabz/resource-server
The MIT license, tests, release notes, and matching repository provide useful transparency. Treat this as legacy code, with adopters prepared to maintain compatibility themselves.
38%
Total Score
100
50
69
83
Health Score Breakdown
This is the package's only release, published over seven years ago, with no releases in the last 12 months. That strongly suggests abandonment risk.
Seven runtime dependencies are reasonable for a Slim OAuth2 resource-server application, though the older project age makes compatibility with current dependency versions uncertain.
Composer is used for builds, but no security-scanning tooling is present. That is a modest transparency and maintenance gap, not a standalone severe risk.
The repository is not archived, which is a positive sign, but it has not been pushed since the same 2019 release and does not offset the stale release history.
The repository has no security policy. For a package implementing OAuth2-related server behavior, that weakens vulnerability-reporting transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Samuel Fontebasso |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 slim/slim Version ^3.1 | — | — |
symfony/dotenv Version ^4.2 | — | — |
monolog/monolog Version ^1.17 | — | — |
league/oauth2-server Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.