xibosignage/oauth2-xibo-cms
The MIT license, small dependency set, matching repository, and release notes provide useful transparency. Maintenance is the main concern: the latest release was over seven years ago, recent commit activity is absent, and this remains a beta release.
42%
Total Score
50
100
79
75
Health Score Breakdown
The package has only 4 releases, with the latest on February 12, 2019 and none in the last 12 months. This long release gap materially raises abandonment risk.
There were 0 commits and 0 active maintainers in the last 3 months. Combined with the old latest release, this is strong evidence that maintenance has effectively stalled.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is secondary to the much older release and inactive development.
The assessed version is a prerelease beta, so its API and behavior may be less settled than a stable release. The presence of release notes helps document this specific version but does not remove the stability concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Spring Signage Ltd |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version 1.1.* | — | — |
league/oauth2-client Version 2.2.* | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.