The stable version and small dependency set are positives, but the sole release dates to 2015. The repository could not be found, so maintenance and provenance cannot be verified; use the replacement instead.
10%
Total Score
100
33
Packagist marks the entire package as abandoned and names spomky-labs/oauth2-server-library as its replacement. This makes adopting the assessed package unsafe for a new dependency.
This package has only one release, published in May 2015, with no releases in the last 12 months. That long period without a new release is strong evidence of abandonment risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spomky-labs/defuse-generator Version ~1.0 | — | — |
spomky-labs/oauth2-server-access-token-manager Version ~5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.