jmitchell38488/oauth2-fitbit
Risky to adopt: the package has had no release or repository activity for more than 10 years, leaving compatibility and maintenance concerns. It is licensed, clearly backed by its matching repository, and not deprecated or archived, but those positives do not offset the prolonged inactivity.
35%
Total Score
25
75
75
Health Score Breakdown
The latest release was over 10 years ago, with no releases in the last 12 months. This is strong evidence that the package is no longer actively maintained.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and indicating abandonment risk.
There was no issue or pull request activity in the last month, and two issues remain open. This provides no evidence of ongoing support.
The repository has only 4 stars, 0 forks, and 2 watchers. Popularity is supporting evidence rather than decisive, but these numbers provide little indication of an active user or maintainer community.
The repository has no security policy. This is a transparency gap, although the absence of workflows and the package's long inactivity limit the additional concern from this signal.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Justin Mitchell |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/oauth2-client Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.