roaresearch/yii2-oauth2-server

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last push, this is the clearest evidence of stalled maintenance.

Release historycaution

The package has had only two releases, with none in the last 12 months and a median release interval of about 2.9 years. This points to slow maintenance and raises abandonment concerns.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens ongoing security oversight for an OAuth2 server package.

Repository archivedcaution

The linked repository is not archived, although its last push was nearly four years before this assessment. The active status partly offsets, but does not remove, the maintenance concern.

Security policycaution

The repository has no security policy, leaving no documented process for reporting and handling vulnerabilities in a security-sensitive package.