The repository has tests, release notes, clear licensing, and organization backing. Maintenance has gone quiet since late 2024, while all 15 workflow actions are unpinned and no security policy or scanning is present.
62%
Total Score
67
100
88
75
The package has only three releases and none in the last 12 months; its latest registry release was in May 2024, indicating a slow and currently paused release cadence.
There were no commits and no active maintainers in the last three months, consistent with a project whose maintenance has stalled since late 2024.
No issues or pull requests were opened or merged in the last month, with one issue and one pull request still open; this adds modest evidence of limited current maintenance.
Composer build tooling is present, but no security-scanning tools were detected, leaving a security-hygiene gap in the project process.
The repository has no published security policy, making vulnerability reporting and response expectations less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/oauth2-client Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.