drbiko/slim-oauth2-http

Release historycaution

The package has 21 releases since July 2015, but its latest release was over seven years ago and there were no releases in the last 12 months. That materially raises maintenance and compatibility risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates maintenance has effectively stopped.

Repo toolingcaution

The repository uses Composer for builds, but no security-scanning tools are configured. This is a transparency and assurance gap, though the repository has no active workflows that amplify it.

Repository archivedcaution

The linked repository is not marked archived, but its last push was over seven years ago, so the absence of an archive flag does not remove the evidence of practical inactivity.

Security policycaution

The repository has no security policy. For a library handling OAuth2 HTTP messages, the lack of documented vulnerability-reporting guidance is a modest transparency concern.