helophp/oauth2-client

Release historycaution

The package has a long history with 42 releases, but its latest registry release was January 3, 2024 and there were no releases in the following 12 months. This makes ongoing maintenance uncertain despite its established history.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. Combined with the old latest release, this is meaningful evidence of stalled maintenance.

Security policycaution

No repository security policy was found. That is a transparency and reporting gap for a package handling OAuth integrations, though it is not evidence of unsafe code by itself.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout, injection, or high-confidence audit findings. However, all 13 action references are unpinned, leaving the build exposed to upstream action changes.