skeeks/cms-oauth2-server

Release historycaution

The package is only 66 days old with three releases concentrated over about one day, so its maintenance record is still too short to establish maturity.

Repo bus factorcaution

One contributor made 100% of the recent commits. Organization backing partly offsets handoff risk, but the observed contributor base remains concentrated.

Repo commit activitycaution

Six commits were made in the last three months, but activity came from only one active maintainer, limiting evidence of durable maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving a meaningful security-maintenance gap for an OAuth server.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a security-sensitive package.