hatframework/oauth-api

Release historydanger

This is the package's only release, published about 10 years and 5 months ago, with no releases in the last 12 months. That strongly indicates the dependency is not actively maintained.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long release gap and raising abandonment risk.

Licensecaution

The artifact includes license files, but the manifest declares MIT while the detected license is BSD-3-Clause. That mismatch creates legal uncertainty even though the release is not unlicensed.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. Combined with the stale project history, this leaves maintenance and vulnerability checks weaker than desirable.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that has seen no recent maintenance.