Package Health

jakub-onderka/openid-connect-php

Healthy and suitable to use, with a small maintainer base as the main caveat. It has recent releases and repository activity, strong documentation and testing, and no deprecation or archive warning.

Latest v1.5.0PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

60

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one registry account has publish access. That is a real continuity concern for a user-owned project, although repository activity shows the package is currently maintained.

Project backingcaution

The package and repository are owned by the same individual account rather than an organization. This matches the single-maintainer evidence and means there is no visible organizational handoff capacity.

Repo bus factorcaution

All recent commits came from one contributor, leaving the project dependent on a single active maintainer and increasing continuity risk.

Repo commit activitycaution

The repository recorded one commit in the last three months from one active maintainer. Recent release and push activity compensate for the low volume, but the maintenance pace is thin.

Repo popularitycaution

The repository has only 11 stars and 5 forks, so external adoption and review appear limited. This is supporting caution rather than a decisive health problem because other project evidence is strong.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jakub Onderka

Direct Dependencies

DependencyLast ReleaseScore
phpseclib/phpseclib
Version ^3.0.7

Weekly Downloads

Info

Last Published
8 days ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform