league/oauth2-server

Dependency profilecaution

The package has 10 runtime dependencies, including cryptography, JWT, and HTTP components; this is a meaningful dependency surface for an OAuth server library, though it is consistent with the package's functionality and is not unusually large.

Package scaffoldingcaution

The artifact omits a README, but the repository has tests and a changelog, and this exact version has GitHub release notes documenting a dependency removal. The missing artifact README is a modest consumer-documentation gap rather than a maintenance failure.

Repo bus factorcaution

All four recent commits came from one contributor, giving a 100% top-contributor share. Organizational ownership partly offsets handoff risk, but no second recent contributor is shown.

Repo commit activitycaution

There were four commits in the last three months, so activity has not stopped, but all were made by one active maintainer. The low volume and narrow recent activity reduce confidence in maintenance capacity.

Repo issue activitycaution

The repository has 56 open issues and 21 open pull requests, with one issue closed in the last month but no recently merged pull requests. This suggests some backlog, although the package has recent release activity.