xrelease/oauth2-xrel

Release historydanger

The package has had only two releases, both in April 2016, with no releases in roughly 10 years. That strongly raises abandonment risk despite the stable 1.0.1 version.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with no activity since April 2016. This is a substantial maintenance concern.

Maintainerscaution

Only one registry maintainer is listed, which limits apparent publishing redundancy. The linked repository is user-owned rather than organization-owned, so there is no provided backing signal to offset that concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a modest hygiene gap, not evidence that the package is unsafe.

Security policycaution

No security policy is present, leaving vulnerability-reporting expectations unclear. This is a secondary transparency gap alongside the much stronger inactivity concerns.