hocnt84/oauth2-server-httpfoundation-bridge

Release historydanger

The package has 11 releases but none in more than eight years; the latest release was published in April 2018. This is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The project may be stable, but there is no observed maintenance capacity for current compatibility issues.

Maintainerscaution

Only one registry maintainer is listed. For this user-owned project, that indicates a thin publishing base rather than organization-backed redundancy.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little evidence of an active user or contributor community. Popularity is supporting evidence rather than decisive on its own, but it reinforces the maintenance concern.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected. For an old, inactive package this leaves less evidence of ongoing security hygiene, though it is not severe by itself.