Package Health/cast1el/oauth-server-bundle

cast1el/oauth-server-bundle

The MIT license, tests, and readable package documentation support adoption, but the project lacks security scanning and its repository does not identify this package in its README. The repository is not archived and the release is stable, though those positives do not offset the maintenance concern.

Latest 3.1.2

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in October 2021, with no releases in the following five years; this is a substantial abandonment concern for an OAuth integration package.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.

Repo package mention

The linked repository name does not match the package name and its README does not mention the package, making the source relationship difficult to verify.

Repo tooling

The project uses Make and Composer, which supports reproducible development workflows, but it has no security-scanning tools despite handling OAuth functionality.

Security policy

The repository has no security policy, leaving no documented process for reporting or coordinating fixes for security issues.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Arnaud Le Blanc

FriendsOfSymfony Community

Direct Dependencies

Dependency	Last Release	Score
symfony/security-bundle Version ^4.4\|^5.0	—	—
symfony/framework-bundle Version ^4.4\|^5.0	—	—
friendsofsymfony/oauth2-php Version dev-symfony-5	—	—
symfony/dependency-injection Version ^4.4\|^5.0	—	—