A versatile Laravel authentication package supporting multi-provider authentication methods
57%
Total Score
caution
Usable with caveats: no releases in two years and workflow dependencies are not pinned.
The latest registry release was about two years ago, with no releases in the last 12 months. The repository was pushed more recently, which partly offsets the package's stale release cadence.
The repository recorded no commits and no active maintainers in the last three months. This weakens evidence of ongoing maintenance, although the repository had a push in December 2025.
The assessed version is v0.0.3 and the package has not reached a stable major release, indicating a relatively immature API surface. It is not marked as a prerelease, so this remains a moderate concern rather than a severe one.
All 13 analyzed action references are unpinned, and the audit found a high-confidence unpinned container image in the tests workflow. Two workflows use read-only permissions and there are no untrusted checkouts or script-injection findings, so this is a hygiene caution rather than a severe workflow risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^9.0|^10.0|^11.0 | — | — |
laravel/socialite Version ^5.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.