iignatov/lightopenid

Release historycaution

This is the package's only release, published over 12 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a library intended as a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, while its last push was in January 2014. The long absence of maintenance materially increases abandonment risk.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. This is a modest transparency and maintenance gap, not a severe risk by itself.

Repository archivedcaution

The linked repository is not archived, but its last push was in January 2014. The non-archived status is positive administratively, while the observed staleness remains the stronger maintenance evidence.

Security policycaution

The repository has no security policy. For an authentication library, the absence of a documented vulnerability-reporting path is a meaningful transparency gap.