socialconnect/oauth2

The package is licensed, stable, and clearly linked to its source repository. Its small dependency surface and lack of install scripts help, but the maintenance evidence is old and security processes are limited.

Latest 3.1.6

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in more than six years, despite a previously regular median interval of about 29 days. This is strong evidence of abandonment risk for an OAuth2 integration library.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with the long release gap. No newer activity is provided to offset this concern.

Repo popularity

The repository reports zero stars and forks and one watcher, providing little supporting evidence of community adoption. Popularity is only secondary evidence, so this modestly lowers confidence rather than driving the verdict.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured. The build setup is a modest positive, while the missing security automation adds a small concern.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance weakness, though not severe enough alone to make the release unfit.