devdot/churchtools-oauth2-client

Release historycaution

This package has only one release, published 624 days ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance, though a small stable package can remain viable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, which is a limited compensating signal but does not demonstrate current maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest review and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled. This matters for an OAuth2 client, although it does not by itself indicate abandonment.