Visual Studio Team Services (VSTS) and Team Foundation Server (TFS) OAuth 2.0 Client Provider for The PHP League OAuth2-Client
55%
Total Score
caution
Usable with caveats: maintenance has been inactive since January 2019.
The five releases were concentrated between October 31 and November 3, 2017, with no releases in the last 12 months. This long release gap is a meaningful maintenance concern for a dependency.
There were zero commits and zero active maintainers in the last three months, consistent with maintenance having stopped about seven years ago.
Composer is used for the build, which fits the PHP package, but no security-scanning tooling is present. This is a modest transparency and maintenance gap, not a severe risk by itself.
The repository is not archived, but its last push was January 19, 2019. The active status is reassuring, while the old push date supports the maintenance concern.
The repository has no security policy. For a package handling OAuth2 integrations, that leaves vulnerability-reporting expectations unclear and modestly lowers maintenance transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
firebase/php-jwt Version ~3.0||~4.0 | — | — |
league/oauth2-client Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.