imarc/oauth2-openid-connect-server

Release historycaution

Only three releases exist, with no release in more than two years and none in the last 12 months. That materially raises abandonment risk for a security-sensitive integration package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap. The repository is not archived, but there is no recent activity to offset the concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This weakens automated assurance, though it is a hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented. This is a meaningful transparency gap for an OpenID Connect server package.