orchestra/oneauth

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning that maintainers no longer support it as a dependency.

Release historydanger

The latest release was published about 11 years ago, with no releases in the last 12 months. The short historical release cadence does not compensate for the long period of inactivity.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. This materially increases abandonment risk.

Project backingcaution

The repository is owned by an organization, which provides some backing context, but it does not offset the package-wide deprecation and years without release or commit activity.

Repository archivedcaution

The repository is not formally archived, which preserves a small amount of positive evidence, but its last push was about 9 years ago and does not indicate active maintenance.