xauth/oauth2-xauthconnect
The project is young, has no recorded commits in the past three months, and has no security policy. Tests, release notes, licensing, organization backing, and dependency tooling provide useful counterweight.
68%
Total Score
75
100
81
75
Health Score Breakdown
The package is 264 days old with three releases, all recorded on the same day, so its release track record is still limited. This is a maturity concern rather than evidence of abandonment by itself.
There were zero commits and zero active maintainers in the past three months. This lowers confidence in current maintenance capacity, although the recent repository push prevents treating it as clear abandonment.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external adoption signal for this young package.
No security policy was found in the repository. For an OAuth and JWT integration library, that is a meaningful transparency gap because users have no documented reporting path.
Version v0.3.0 is not a prerelease, but it remains below a stable major version. That is a modest maturity caveat for a library dependency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Serhii Cherneha |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 firebase/php-jwt Version ^6.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
league/oauth2-client Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 11 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.