dos/oauth-server-bundle

Release historydanger

The package has made only one release, on October 18, 2018, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency that may need compatibility and security maintenance.

Repo commit activitydanger

The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the long period since its only release. No provided activity signal compensates for this inactivity.

Package scaffoldingcaution

The artifact includes a README, but it is only 26 characters and contains a title; tests and a changelog are absent, which is normal packaging practice. The GitHub release flag is positive, but no release notes are available for this version.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the source may not clearly identify what is being published. This reduces transparency, although the repository is otherwise linked and accessible.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools are present. This is a hygiene gap that adds concern alongside the package's lack of recent maintenance.