Is league/oauth2-client safe to use?

league/oauth2-client has no known vulnerabilities on the latest version (2.9.0). DepScope rates its health at 55/100 (high risk).

What is the latest version of league/oauth2-client?

The latest version of league/oauth2-client is 2.9.0, released 2025-11-25.

Does league/oauth2-client have known vulnerabilities?

No known vulnerabilities on the latest version of league/oauth2-client.

Is league/oauth2-client deprecated?

No, league/oauth2-client is actively maintained. Latest release: 2.9.0 (2025-11-25).

What are alternatives to league/oauth2-client?

DepScope has no curated alternatives for league/oauth2-client at this time.

What license does league/oauth2-client use?

league/oauth2-client is licensed under MIT.

league/oauth2-client

composerv2.9.0

OAuth 2.0 Client Library

License MITpermissive44 versions2 maintainers3 deps

thephpleague/oauth2-client

/ 100

Health

safe to use

league/[email protected] is safe to use (health: 55/100)

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

3/15

community

Vulnerabilities

none known

Maintainer trust

Active maintainers (3m)

4

Contributors (12m)

5

Primary author dominance

52%

GitHub stars

3,799

Health History

Dependency Tree

License Audit

Dependencies (3)

php ext-json guzzlehttp/guzzle

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/league/oauth2-client

Last updated · 2025-11-25T22:17:17+00:00