thecolony/oauth2-colony
Its documentation, tests, changelog, and licensing are in place, with activity from five contributors. The missing security policy and two unpinned workflow actions leave modest release-hygiene concerns.
79%
Total Score
100
81
50
Health Score Breakdown
The package is young at 90 days but has shipped 13 releases, including 13 in the last 12 months, with a median interval of about 23 hours. That shows active iteration, though long-term stability is not yet demonstrated.
Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency and maintenance-hygiene gap, not evidence of abandonment.
The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and response expectations undocumented.
v0.2.10 is not a prerelease, but the package remains before a stable major release, so its public API may still change more than a mature 1.x package.
The only workflow was fully analyzed with no injection, untrusted-checkout, or audit findings, but both of its two action references are unpinned. That weakens build reproducibility without showing an active dangerous workflow.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 The Colony |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/simple-cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
league/oauth2-client Version ^2.7 | — | — |
web-token/jwt-library Version ^3.4 || ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.