The package has a clear MIT license, a matching repository, and only one runtime dependency. Its small codebase has no tests or security scanning, and maintenance has stopped since June 2016.
38%
Total Score
25
100
71
83
The last release was June 8, 2016, and there have been no releases in the past 12 months. This strongly indicates abandonment despite the package having 12 historical releases.
The repository has recorded zero commits and zero active maintainers in the past three months, consistent with the last push occurring in 2016. No provided signal shows current maintenance capacity.
Only one registry account has publish access. This is a thin publishing base, and no provided project-backing signal shows organizational support to compensate for it.
The artifact includes a readable README, which supports basic adoption, but neither the package nor repository has tests or a changelog. Missing tests matter for an authentication component, while the README partially compensates for documentation transparency.
Composer is used for the build, but no security scanning tools are present. This is a hygiene gap that adds concern for an authentication package, though it is less severe than the maintenance failure.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.