chadicus/slim-oauth2-http

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so there is no demonstrated organizational backing to offset the thin maintainer base.

Release historycaution

The package has 22 releases over more than 11 years, but none in the last 12 months; the latest release was published in May 2023. This indicates a substantial maintenance pause for a dependency last updated over three years ago.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, reinforcing the evidence that active maintenance has stopped.

Repo toolingcaution

The repository uses Composer for builds but reports no security-scanning tooling. The missing scanner is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, so it gives consumers no documented process for reporting or handling vulnerabilities.