opencontent/ocsiracauth-ls

Release historydanger

The latest release was over three years ago, and there were no releases in the last 12 months. This is strong evidence of stalled maintenance for a dependency released since 2019.

Repo commit activitydanger

The repository had no commits and no active maintainers in the last three months, consistent with the long release gap. This materially increases abandonment risk.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. That makes the package-to-source relationship less transparent, although the repository is organization-owned.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a modest supply-chain hygiene gap, not evidence that the release is unsafe by itself.

Security policycaution

The repository has no published security policy. For an authentication package, this reduces transparency around vulnerability reporting and response.