itk-dev/openid-connect
Healthy and suitable to depend on. It has regular recent releases, active repository work, strong tests and release notes, and no deprecation or archival concerns; maintenance is concentrated in one recent contributor and the repository lacks a security policy.
84%
Total Score
75
100
100
80
Health Score Breakdown
All 14 recent commits came from one contributor, creating a real continuity concern; organization ownership provides some handoff capacity, but no second recent contributor is shown.
There were 14 commits in the last three months, but all came from one active maintainer, so current work is strong while continuity depends heavily on that contributor.
No security policy was found, leaving vulnerability-reporting guidance unclear for a security-sensitive authentication library.
Five workflows lack top-level permission declarations and one release workflow requests top-level write access, which is broader than ideal even though no dangerous workflow pattern was detected.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jeppe Kuhlmann Andersen |
| Ture Gjørup |
| Lars Steen Risom |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/cache Version ^2.0 || ^3.0 | — | — |
psr/http-client Version ^1.0 | — | — |
firebase/php-jwt Version ^7.0 | — | — |
league/oauth2-client Version ^2.8.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.