The package includes tests, a clear README, an MIT license, and no install-time scripts. Its single release and last repository push were about 10 years ago, with no recent commit activity, making future compatibility support doubtful.
38%
Total Score
25
100
75
75
Only one release exists, published about 10 years ago, with no releases in the last 12 months. This is strong evidence that maintenance has stopped.
The repository recorded no commits and no active maintainers in the last three months; combined with the last push being about 10 years ago, this indicates likely abandonment.
One registry maintainer is consistent with this user-owned project, but it provides limited visible publishing capacity and does not compensate for the lack of recent activity.
The repository has no stars and only two forks, offering little supporting evidence of broad adoption or an active community.
Composer build tooling is present, but no security scanning tools were detected. This is a secondary hygiene gap beside the more serious maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/oauth2-client Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.