gigablah/silex-oauth

It has a clear MIT license, a useful README and changelog, and only one runtime dependency. The last registry release was in 2015 and the repository has had no commits or issue activity in the measured periods, making ongoing maintenance unlikely.

Latest 1.3.1

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in more than 10 years; its latest registry release was in December 2015 despite seven total releases. This is strong evidence that the dependency is no longer actively maintained.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers over the last 3 months. Although it was pushed in June 2020, current development activity is absent.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while 5 issues and 2 pull requests remain open. This supports the concern that maintenance has stalled.

Repo tooling

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a minor hygiene concern rather than evidence of abandonment on its own.

Security policy

The repository has no security policy. This is a transparency and maintenance gap, though it is less significant than the long release and activity hiatus.