sweelix/yii2-oauth2-server

Registry deprecationdanger

Packagist marks the package abandoned at package scope and names blackcube/yii-oauth2 as a replacement. This is a severe adoption and maintenance warning.

Release historydanger

The package has had no releases in the last 12 months, and its latest release was in November 2018. That long release gap strongly indicates abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed in November 2023, current maintenance capacity is not demonstrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap, partly offset by the package's clear source and licensing.

Security policycaution

The linked repository has no security policy. For an OAuth2 server integration, this is a meaningful transparency gap because there is no documented process for reporting security issues.