The package includes tests, documentation, and release notes, with an organization-owned repository matching the package. Its single registry publisher, limited popularity, absent security policy, and no recorded commits in the last three months leave maintenance capacity modest.
65%
Total Score
63
100
83
83
Only one account has registry publish access, which is a limited publishing base; the organization-owned project provides some backing but does not establish active maintenance by itself.
The package has existed since November 2019 and released version 1.2.0 in May 2026, but only four releases and one release in the last year indicate a slow cadence.
The repository recorded 0 commits and 0 active maintainers in the last three months, despite the recent release, leaving current maintenance activity uncertain and thin.
There are no open issues or pull requests, and no issue or pull-request activity in the last month; this is mildly reassuring but also provides little evidence of an active community.
The repository has only 7 stars, 0 forks, and 1 watcher, so community adoption and external review appear limited; this is supporting evidence rather than a standalone failure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/oauth2-client Version ^2.4.1 | — | — |
league/oauth2-github Version ^3.1 | — | — |
league/oauth2-google Version ^4.0 | — | — |
omines/oauth2-gitlab Version ^3.6 | — | — |
league/oauth2-facebook Version ^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.