Is league/oauth2-server safe to use?

league/oauth2-server has no known vulnerabilities on the latest version (9.3.0). DepScope rates its health at 58/100 (high risk).

What is the latest version of league/oauth2-server?

The latest version of league/oauth2-server is 9.3.0, released 2025-11-25.

Does league/oauth2-server have known vulnerabilities?

No known vulnerabilities on the latest version of league/oauth2-server.

Is league/oauth2-server deprecated?

No, league/oauth2-server is actively maintained. Latest release: 9.3.0 (2025-11-25).

What are alternatives to league/oauth2-server?

DepScope has no curated alternatives for league/oauth2-server at this time.

What license does league/oauth2-server use?

league/oauth2-server is licensed under MIT.

league/oauth2-server

composerv9.3.0

A lightweight and powerful OAuth 2.0 authorization and resource server library with support for all the core specification grants. This library will allow you to secure your API with OAuth and allow your applications users to approve apps that want to access their data from your API.

License MITpermissive114 versions2 maintainers10 deps

thephpleague/oauth2-server

/ 100

Health

safe to use

league/[email protected] is safe to use (health: 58/100)

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

7

Primary author dominance

76%

GitHub stars

6,644

single active maintainer 3m

Health History

Dependency Tree

License Audit

Dependencies (10)

php ext-openssl league/event league/uri lcobucci/jwt psr/http-message defuse/php-encryption ext-json lcobucci/clock psr/http-server-middleware

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/composer/league/oauth2-server

Last updated · 2025-11-25T22:51:15+00:00