The package is clearly identified, permissively licensed, and has a useful README with release notes. Its maintenance outlook is weak, and the repository has little supporting quality or security process.
45%
Total Score
50
86
75
This package has had only one release, with no releases in the last two years and roughly two years and seven months since publication. That is strong evidence of limited ongoing maintenance for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months. Together with the single-release history, this indicates a meaningful abandonment risk.
The repository uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.
No security policy was found in the repository. For a small OAuth provider this reduces the clarity of vulnerability-reporting processes, though it does not show an active security problem.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
socialiteproviders/manager Version ^4.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.