gzh/hyperf-passport

A substantial README, stable versioning, and a small runtime dependency set help consumers get started. One maintainer, no commits in about two years, no security policy, and no security scanning make ongoing support harder to trust.

Latest v1.0.7

Packagist

53%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, while its last push was about two years ago. This is the strongest evidence of stalled maintenance in the available signals.

Maintainers

The registry has one publishing maintainer, gzh. With user-owned project backing and no evidence of a broader active maintainer base, this leaves limited visible continuity if that maintainer stops supporting it.

Release history

The latest release was in September 2024, and there have been no releases in the last 12 months. This indicates a meaningful maintenance gap for a package intended to provide an OAuth2 integration.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these numbers provide no supporting evidence of a wider user or contributor community.

Repo tooling

Composer is used as the build tool, but no security scanning tools are present. That weakens repository hygiene and leaves fewer visible controls around an authentication-related package.