An oAuth 1 and oAuth 2 library based on Guzzle with the big four (google, linkedin, twitter, facebook) baked in.
38%
Total Score
unhealthy
No release or repository activity since 2019 leaves this OAuth library with a substantial abandonment risk.
The package has had 4 releases since April 2014, but none in the last 12 months and the latest release was in May 2019. This long period without a new release is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This confirms that the lack of registry releases reflects absent recent development rather than only a publishing delay.
Composer is used as the build tool, but no security scanning tools are present. This is a maintenance and transparency gap, though not severe on its own.
The repository has no security policy. For an OAuth library handling authentication flows, the missing disclosure and response guidance is a meaningful hygiene concern.
v0.0.4 is not a stable major release, so compatibility expectations are limited even though it is not marked as a prerelease. Combined with the old release history, this increases adoption risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzle/guzzle Version >=v3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.