jstormes/ezauth2-server-skeleton

Release historydanger

The latest release was in November 2018, with no releases in the last 12 months and only five releases overall. This long period without published updates is a substantial abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. The linked repository is not archived, but it shows no recent maintenance activity.

Dependency profilecaution

The package declares 12 runtime dependencies, including OAuth2, middleware, and framework components. This is a meaningful dependency surface for an old package, though the signal does not show that the dependencies are currently unsafe.

Repo toolingcaution

Composer is used as a build tool, showing basic project tooling, but no security scanning tools were detected. The missing security automation is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For a package implementing OAuth2 handlers and authentication flows, that weakens vulnerability-reporting transparency.