retailcrm/oauth-server-bundle

Release historycaution

The package has 11 releases over about 2 years, but none in the last 12 months; this indicates that maintenance and compatibility updates may have stalled.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, a material sign of currently inactive maintenance when combined with no registry releases in the last year.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tools were detected, leaving a security-maintenance gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in an OAuth server bundle.

Token permissionscaution

The single workflow has no top-level token permissions declaration. Although no write permissions or dangerous workflow patterns were observed, explicit least-privilege settings would provide stronger CI hygiene.