mapkyca/known-oauth2-server
The package has had no registry release in over five years and no commits in the past three months. It includes tests and clear usage documentation, but lacks a security policy and security scanning.
50%
Total Score
50
100
86
50
Health Score Breakdown
The package and repository are owned by the same individual account, providing direct ownership alignment but no organizational backing or broader maintenance capacity.
The latest release was published in April 2021, with no releases in the last 12 months. That long gap materially raises abandonment and compatibility risk.
There were zero commits and zero active maintainers in the past three months. For an OAuth2 server, this weakens confidence that defects and compatibility issues are actively addressed.
Composer build tooling is present, but no security scanning tools were detected. That is a meaningful hygiene gap for authentication-related code.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities in an authentication server.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Marcus Povey |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 firebase/php-jwt Version ^5.2 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.