Package Health/zfr/zfr-oauth2-server-module

zfr/zfr-oauth2-server-module

The package includes tests, a usable README, release notes, and a repository that clearly matches it. However, its pre-1.0 versioning and license mismatch add friction, while the long maintenance gap makes future compatibility and support uncertain.

Latest 0.7.0

Packagist

39%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published about 11 years ago, and there were no releases in the last 12 months. The earlier nine releases show an established project, but not current maintenance.

Repo commit activity

The repository has had no commits or active maintainers in the last three months, consistent with its last push being about 9 years ago. This is strong evidence of abandonment risk.

License

The artifact contains a license file and the repository also has one, so licensing is not absent. However, the manifest declares MIT while the detected file license is BSD-3-Clause, creating a material ambiguity.

Repo issue activity

There were no new or merged issues or pull requests in the last month. The lack of open work is not inherently bad, but here it reinforces the prolonged inactivity shown by release and commit history.

Security policy

The linked repository has no security policy. This does not prove a security problem, but it reduces transparency for reporting and handling issues in an authentication-related module.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Michaël Gallego

Direct Dependencies

Dependency	Last Release	Score
zfr/zfr-oauth2-server Version 0.7.*	—	—
zendframework/zend-mvc Version ~2.2	—	—
zendframework/zend-http Version ~2.2	—	—
doctrine/doctrine-module Version ~0.9	—	—
zendframework/zend-stdlib Version ~2.2	—	—