ramsalt/oauth2-connectid
The project has a tiny codebase and little evidence of current engineering oversight. Its license is clear and installation has no lifecycle scripts, but those positives do not offset the overall maintenance concern.
18%
Total Score
40
75
Health Score Breakdown
Packagist marks the entire package as abandoned and names oauth2-connectid/oauth2-connectid as its replacement. This is a severe adoption warning for a dependency.
The latest release was published over six years ago, with no releases in the last 12 months. That strongly indicates the package is no longer actively maintained.
The repository has 1 star and no forks, providing little evidence of broad community use or review. Popularity is supporting evidence only, but it offers no compensating maturity signal here.
The repository is not archived, which is a modest positive, but it was last pushed over five years ago and does not compensate for the lack of recent releases.
The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency concern for an OAuth client library.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Marlon Saglia |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/oauth2-client Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.