league/oauth2-client
Healthy and suitable to depend on. It has a long release history, a current stable release, an active non-archived organization-backed repository, tests, and release notes; recent work is limited to one contributor and the repository lacks a security policy.
82%
Total Score
70
100
100
80
Health Score Breakdown
All recorded commits in the last three months came from one contributor. The organization-owned repository provides some ability to hand maintenance off, but the observed short-term contributor base remains narrow.
Only one commit from one active maintainer was recorded in the last three months, showing limited recent development activity despite the current release and recent repository push.
The repository has 23 open pull requests and received two new pull requests in the last month, but no issues or pull requests were closed during that month, indicating some backlog.
No SECURITY.md or other repository security policy was found, leaving vulnerability-reporting expectations less explicit for a security-sensitive OAuth library.
The only workflow lacks a top-level permissions declaration. No write permissions were observed, but explicitly restricting workflow permissions would provide stronger assurance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alex Bilbie |
| Woody Gilk |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^1.9.1 || ^2.6.3 || ^3.0 | — | — |
guzzlehttp/guzzle Version ^6.5.8 || ^7.8.2 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 days ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.