contributte/oauth2-server
The project has clear licensing, repository tests, and release notes for this version. Maintenance activity has paused recently, and every audited workflow dependency is unpinned.
62%
Total Score
75
81
100
Health Score Breakdown
The package has existed since 2020 and released once in the last 12 months, with the latest release in January 2026; this shows continuity but a modest current cadence.
The repository recorded no commits from any active maintainer in the last three months, which is a meaningful recent-maintenance concern despite the recent release and repository push metadata.
The repository uses Make and Composer, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than a severe risk.
Version 0.5.0 is not a stable major release, which adds some compatibility risk, although it is not marked as a prerelease and recent versions have not used prerelease labels.
All four workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, injections, or audit findings. However, all 8 action references are unpinned, leaving workflow dependencies exposed to changing upstream code.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nette/di Version ^3.2.2 | — | — |
league/oauth2-server Version ^9.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.