knpuniversity/oauth2-client-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months, which is a meaningful maintenance concern even though the package has a recent release history.

Repo issue activitycaution

There is still some issue activity, with one new issue in the last month and 5 open pull requests, but no pull requests were merged during that period, suggesting limited current throughput.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and assurance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Token permissionscaution

Neither workflow declares top-level token permissions. Although no write permissions were observed, explicit least-privilege settings would provide stronger workflow transparency.