openeuropa/oe_auth

This release has strong evidence of an established and actively published project: it is over 8 years old, has 39 releases, shipped 3 releases in the last 12 months, is stable, backed by the OpenEuropa organization, linked to a non-archived repository, and includes substantial documentation, tests, changelog, licensing, and build structure. However, the package is explicitly marked abandoned on Packagist with a replacement package, and the linked repository does not match the package name or mention it in its README, creating material uncertainty about whether this release is the intended dependency. Recent work is also concentrated in one contributor, while repository security-policy and workflow permission hygiene are incomplete. Developers should prefer the stated replacement package unless compatibility requirements make this package unavoidable.

Latest 1.22.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the package as abandoned and identifies openeuropa/oe_authentication as its replacement. Although the replacement provides a clear migration path, depending on this package carries a substantial lifecycle risk.

Lifecycle scripts

The package defines post-install-cmd and post-update-cmd Composer scripts. These require review in a dependency-sensitive environment, but the signal alone does not establish an unsafe or unusually invasive workflow.

Repo bus factor

All 5 recent commits came from one contributor, giving a 100% top-contributor share. Organizational ownership partly mitigates this concentration, but it remains a genuine continuity risk.

Repo commit activity

The repository recorded 5 commits in the last 3 months, showing current activity, but only one active maintainer produced them. The activity is positive but limited in breadth.

Repo issue activity

Two issues were closed and one pull request was merged in the last month, indicating some ongoing maintenance, although there were no new issues or pull requests and 10 issues plus 8 pull requests remain open.