friendsofsymfony/oauth-server-bundle

Release historydanger

The package has 21 releases but none in the last seven years, and the latest registry release was published in January 2019. That long gap is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the stale registry release history, this materially increases abandonment risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked repository directly corresponds to this release, beyond an ordinary subpackage naming difference.

Repo toolingcaution

The repository uses Make and Composer for builds, but no security scanning tools were detected. The build setup is established, while the missing scanning is a modest transparency gap.

Security policycaution

No security policy was found in the repository. For an OAuth server bundle handling authentication flows, the absence of a documented vulnerability-reporting path is a meaningful transparency gap.