dreamfactory/service-oauth

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This is a severe warning for taking a new dependency, despite the repository remaining unarchived.

Release historydanger

The latest release was published nearly 12 years ago, and there have been no releases in the last 12 months. The historical 24-release record does not compensate for this prolonged release silence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. A last push in December 2023 shows some residual repository activity but does not offset the current inactivity.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package, leaving uncertainty about whether it is the authoritative source. Organization backing reduces—but does not remove—this concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest hygiene gap, especially for an authentication-related library, though it is less significant than the abandonment signals.