Fork of league/oauth2-server 9.4.1 with support for PSR-7 1.1 and 2.0.
62%
Total Score
caution
A brand-new one-release package has no demonstrated maintenance history, and its workflows contain a high-confidence unpinned container image.
This is a newly published package with one release and no established release cadence, so maintenance maturity is not yet demonstrated.
There were zero commits and active maintainers in the last three months; because the repository is brand new, this mainly leaves maintenance capacity unproven rather than proving abandonment.
The repository has zero stars, forks, and watchers; this is weak supporting evidence, but popularity alone does not determine health for a newly published package.
The linked repository is not archived, although its last push coincides with the initial publication and does not yet demonstrate sustained maintenance.
The repository has no security policy, which is a transparency gap for an OAuth server library, though it is not severe by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
league/uri Version ^7.8 | — | — |
lcobucci/jwt Version ^5.6 | — | — |
league/event Version ^3.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.