novak-collabim/oauth2-apple
The package includes a complete README, tests, changelog, matching repository, and MIT licensing. Its small dependency set is manageable, but workflow references are unpinned and the repository has no security policy.
58%
Total Score
50
100
88
50
Health Score Breakdown
This is the only release, published over three years ago, with no releases in the last 12 months. That weakens confidence that fixes and compatibility updates will arrive.
The repository recorded no commits and no active maintainers in the last three months, consistent with a project that has been inactive since its initial release.
The repository has no security policy, which makes vulnerability reporting and coordinated fixes less transparent for a package handling OAuth functionality.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 10 action references are unpinned, leaving the build exposed to upstream action changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Patrick Bußmann |
| Collabim |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 lcobucci/jwt Version ^3.4 || ^4.0 | — | — |
firebase/php-jwt Version ^5.2 || ^6.0 | — | — |
league/oauth2-client Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.