gardeshi/yii2-oauth2

Release historydanger

The latest release was published nearly six years ago, with no releases in the last 12 months and only two releases overall. This is strong evidence of abandonment risk for a security-sensitive integration library.

Maintainerscaution

Only one account has registry publish access, leaving a thin observed publishing base and increasing continuity risk if that maintainer becomes inactive.

Package scaffoldingcaution

A README is present, but at only 13 characters it gives consumers almost no integration guidance. Missing tests and changelog files in a published artifact are normal and do not lower the score.