It has a clear MIT license, automated dependency scanning, tests, and a small runtime dependency set. The missing README weakens integration guidance, while all 13 workflow action references are unpinned and reduce build reproducibility.
62%
Total Score
50
100
88
100
The package includes tests, which supports basic project maturity, but it has no README to guide consumers of this PHP library. No changelog is not a concern because changelogs belong in the source project and may be absent in a small package.
The package has had only two releases, with none in nearly two years. This is meaningful evidence of a potentially stalled project, although a small stable library may need few releases.
The repository recorded zero commits and zero active maintainers during the last three months. That weakens evidence of ongoing maintenance, though the repository is not archived and was pushed recently.
Both workflows were analyzed successfully and had no reported audit findings or untrusted checkouts. However, all 13 action references are unpinned, leaving build dependencies less reproducible.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/oauth2-client Version ^2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.