tourze/baidu-oauth2-integrate-bundle

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the last push being in December 2025, this is a meaningful maintenance and abandonment concern.

Dependency profilecaution

The package declares 31 runtime dependencies, including database, administration, security, and multiple framework integration bundles; this broad dependency surface increases upgrade and compatibility burden.

Project backingcaution

The registry namespace and repository owner match, and the repository is user-owned rather than organization-owned. This is consistent ownership evidence, but it provides less institutional backing than an organization-maintained project.

Release historycaution

Five releases were published, including four in the last 12 months, with a median interval of about 3 days; this shows an initially active release process, although the latest release is now several months old.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. This is a hygiene gap for an OAuth2-related package, though the repository does have CI workflows and tests.