A Laravel package for OAuth2 integration
61%
Total Score
caution
A stable package with tests and documentation, but maintenance has stalled and several transparency and workflow safeguards are weak.
The artifact includes a license file and the repository also has one, but the declared MIT license conflicts with detected Apache-2.0 text; this should be clarified before adoption.
Only one registry publishing account is listed, creating a thin operational base; the repository is user-owned, so organization backing does not offset the bus-factor concern.
The package has 11 releases, but none in the last 12 months; its latest registry release was about 16 months ago, indicating stalled release activity.
The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign that maintenance has slowed or stopped.
The repository has 1 star, 0 forks, and 1 watcher; this is weak supporting evidence and leaves little community activity to compensate for the maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.8 | — | — |
laravel/framework Version ^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.