Is this package still maintained?

[petrnymsa]

There is a lot of issues old more than one year without any responses. Pull Requests are the same.

Is this package maintained?

It would not bother me if the package's usage was for example for UI but this package aims to solve "security" within our app and I am not sure if is it ok to use the package which seems is a little bit abandoned.

[jfahrenkrug]

I wonder the same thing. Since it's under the dart-lang umbrella it seems like the best choice for OAuth in Dart. But maybe that's not the case anymore? Are there more mature packages to consider?

[petrnymsa]

@jfahrenkrug Well just another one https://pub.dev/packages/oauth2_client, but i was not able to make it work. So far in our project we are using this package, but still really concerned about it's future and security.

It seems like in the Flutter world everyone just use Firebase Auth and they are good to go. It really suprise me, that there is no decent OAuth client

[RaphaelStAlme]

Same opinion. That why i fork this project in order to resolve issue and develop oauth 2.0.1 version for my app. But yes it's a security risk if package is not maintained.

[petrnymsa]

@RaphaelStAlme Could you share which fixes you did?

[RaphaelStAlme]

@RaphaelStAlme Could you share which fixes you did?

Yes of course @petrnymsa ,

I fixed issue with "expire in" type which is a string for Azure Directory, so i added a parseInt in order to have Int for all OAuth like Ad.

Before, it generated a typeException because of that

That it's 😉

[devoncarew]

There is a lot of issues old more than one year without any responses. Pull Requests are the same.
Is this package maintained?

Good question! We are re-thinking whether we should own and publish this package now; I created an issue to track that: #375; comments welcome.

For background, this was created by the original pub team for use in the pub command-line tool. We likely don't have bandwidth to maintain it as a general purpose solution however. That's not ideal for two reasons; first, people assume that if a package is published from the Dart team, that it's intended to be a best-of-breed solution. And second, as this package is in the security space, having the package be well maintained becomes even more important.