svgta/oidc-client-php

Licensecaution

The manifest declares MIT, while the included LICENSE file is detected as GPL-3.0. That unresolved mismatch creates legal and distribution uncertainty despite a license file being present.

Maintainerscaution

Only one registry publishing account is listed, leaving a thin publishing base. The linked project is user-owned rather than organization-backed, so there is limited evidence of maintainer redundancy.

Release historycaution

The latest release was over two years ago, with no releases in the last 12 months. The package is not deprecated, but this indicates substantially reduced maintenance activity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the long release gap. This is meaningful abandonment risk for a security-sensitive authentication library.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with one issue still open. This offers no evidence of active support and reinforces the stale maintenance picture.