Clear documentation, licensing, and a small dependency set make the package easy to inspect and integrate. Its maintenance evidence is weak, with no release or repository activity since 2017 and no security policy. The organization backing and unarchived repository reduce, but do not remove, abandonment concerns.
38%
Total Score
50
100
75
75
The package has only one release, published more than eight years ago, with no releases in the past 12 months. This is strong evidence of stagnation for a library tied to an evolving service.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the release history showing no update since 2017. No provided maintenance signal compensates for this inactivity.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide no community-maintenance reassurance.
The repository has no security policy. That weakens vulnerability-reporting transparency, although it is secondary to the much stronger concern raised by the long lack of maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
league/oauth2-client Version ^2.0 | — | — |
stevenmaguire/oauth2-salesforce Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.