shotbow/yii2-oauth2-client
The MIT license, clear README, and matching source tree make it straightforward to inspect and integrate. However, maintenance has effectively stopped for over 10 years, with no recent commits or releases and no security scanning or policy. Pinning this release carries substantial abandonment risk.
38%
Total Score
50
75
50
Health Score Breakdown
The package has only two releases, with the latest published in April 2016 and none in the last 12 months. The exact-version release notes provide some transparency, but do not offset the prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with more than 10 years since the last push. This is strong evidence of abandonment risk.
Composer is used for the build, but no security scanning tools were detected. For a dependency with long-standing inactivity, that missing security hygiene adds a modest concern.
No repository security policy was found. This limits disclosure guidance, and there is no provided compensating security process.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Navarr Barnier |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2-authclient Version ~2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.