oauth2
v5.0.0 GrowingAn extensible, strongly-typed implementation of OAuth2
Quick Verdict
- ✕Not updated for 1+ year
- ✓Stable API (5.x for 11+ years)
- ✓Massive adoption (2.8K crates depend on it)
- ✓Permissive license (MIT OR Apache-2.0)
Security
Deep Insights
2.9M downloads in the last 30 days (95.5K/day), up 29% from the previous period.
2.8K crates depend on oauth2. Strong ecosystem adoption means battle-tested code and long-term stability.
oauth2 has only 1 owner despite 2.8K dependents. This is a bus-factor concern — consider the implications for long-term support.
The API has been stable (1.x) for over 11 years with 64 releases. This level of maturity means you can depend on it without worrying about breaking changes.
Notable dependents include openidconnect, rmcp, tiberius, pulsar, matrix-sdk. When high-quality crates choose oauth2, it's a strong quality signal.
Health Breakdown
Recency, release consistency, active ratio
Yanked ratio, deps, size, maturity, features
Reverse deps, ownership, ecosystem
Downloads, momentum, growth trend
Docs, repo, license, metadata
Download Trend
Top Dependents
Version Adoption
Release Timeline
Feature Flags
default =["reqwest", "rustls-tls"]
