macsidigital/laravel-oauth2-client

Release historycaution

The package has 13 releases since May 2020, but its latest release was in February 2023 and there were no releases in the last 12 months. This is a meaningful maintenance concern for an OAuth integration package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the long gap since the latest release. The repository is not archived, but current maintenance capacity is not demonstrated.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a package handling OAuth authentication.

Token permissionscaution

Both analyzed workflows lack top-level token permissions declarations, so their GitHub Actions permissions are not explicitly constrained. No workflow has declared top-level write access, which limits the severity of this hygiene gap.