Clear documentation, tests, release notes, and a matching source repository support adoption. However, the last release and commit were over eight years ago, with no recent maintainers or security tooling, so future compatibility and fixes are uncertain.
58%
Total Score
50
100
75
83
The package has five releases since August 2015, but its latest release was in May 2018 and it had no releases in the last 12 months, indicating prolonged inactivity.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with long-term abandonment risk.
One registry account has publish access. This is consistent with the individually owned repository, but it also reflects a thin publishing base and offers little redundancy if the maintainer is unavailable.
There are two open issues but no new or closed issues and no pull requests in the last month, providing no evidence of current issue handling.
Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/oauth2-client Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.