krak/lava-oauth2

Release historydanger

This package has only one release, published about nine years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving little evidence of ongoing maintenance.

Repo issue activitycaution

Two issues remain open, with no issues or pull requests closed in the last month. This is secondary evidence of limited project activity rather than a severe risk by itself.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For an OAuth2 and database-integrating library, that is a meaningful maintenance and transparency gap.

Security policycaution

The repository has no security policy. That weakens the project's disclosure and response transparency, especially for authentication-related software.