raccourci/oauth2-php

Usable with caveats, but it has been effectively unmaintained for years. The package is licensed, tested, clearly backed by its matching organization repository, and not deprecated or archived; however, its last release was nearly seven years ago and the repository has had no commits for over six years.

Latest 1.2.4

Packagist

56%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 17 releases, but none in the last 12 months and its latest release was nearly seven years ago. This substantially lowers confidence that issues or platform changes will be addressed.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with activity having stopped for years. This is a major abandonment concern for a library implementing an evolving authentication protocol.

Repo tooling

Composer is used for the build, but no security scanning tool was detected. This is a transparency gap, though the absence of scanning alone does not establish that the package is unsafe.

Repository archived

The linked repository is not archived, which is a positive sign, but its last push was over six years ago and the non-archived status does not compensate for the lack of recent activity.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling security issues. That is a meaningful maintenance and transparency gap for an OAuth2 library.