departmentofhealth/yii2-dohclient

Release historydanger

The package has made no releases in more than nine years, with only three releases overall and none in the last 12 months. This strongly indicates abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push in February 2017. No compensating recent maintenance activity is present.

Package file treecaution

The complete package tree contains only four files: two PHP classes, a README, and composer.json. This is transparent but provides little evidence of tests, release infrastructure, or ongoing project depth.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. The build setup is appropriate, while the missing security automation is a minor hygiene gap.

Security policycaution

The linked repository has no security policy. For a package implementing an OAuth2 client, this leaves vulnerability-reporting expectations and response procedures undocumented.