ternaryop/tiny-oauth

Release historydanger

The package has had only two releases, both in October 2023, with no releases in the following 12 months; this is strong evidence of prolonged inactivity.

Repo commit activitydanger

There were no commits or active maintainers in the last three months, consistent with the release history and indicating that maintenance has effectively stopped.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty about whether the linked repository directly represents this release.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, so there is little visible community adoption or outside support to compensate for the inactive maintainer activity.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities; this is a meaningful transparency gap for an OAuth library.