nl.idaas/laravel-openid-connect

Licensecaution

The manifest declares LGPL-3.0-only while the artifact and repository license file identify AGPL-3.0. A license exists, but the mismatch creates real adoption and compliance uncertainty.

Release historycaution

The package has 26 releases since April 2020, but none in the last 12 months; the latest release was about 19 months ago, indicating stalled maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected, leaving a meaningful security-process gap for an authentication-related package.

Security policycaution

No security policy was found in the repository, reducing transparency about how vulnerabilities should be reported and handled.