kamermans/guzzle-oauth2-subscriber

Release historycaution

The package has existed since May 2017 with 20 releases, but it has had no release in the last 12 months, indicating a dormant release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release and raising maintenance risk.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tooling was detected; this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no SECURITY.md or other recorded security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but both action references are unpinned, weakening build reproducibility and supply-chain hygiene.