dhtech/larauthkit

Risky to adopt: this package has had no new release or repository activity for about five years. It is clearly licensed and documented, but the one-release history, inactive maintenance, and lack of security tooling make long-term support uncertain.

Latest 1.0.2

Packagist

42%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about five years ago, with no releases in the last 12 months. That strongly raises abandonment and compatibility risk for a Laravel authentication library.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no updates for about five years. This is a substantial maintenance concern.

Dependency profile

Three runtime dependencies are declared, including Laravel Socialite, a Keycloak provider, and an authorization client. This is a meaningful integration surface whose aging dependencies may increase maintenance risk, although no dependency vulnerability evidence was provided.

Repo popularity

The repository has only 2 stars, 1 fork, and 1 watcher. Low popularity is supporting evidence rather than decisive on its own, but it offers little external assurance alongside the inactive project history.

Repo tooling

Composer build tooling is present, but the repository has no security scanning tools. For an authentication integration package, that is a transparency and maintenance gap, though the absence of tooling alone is not evidence of a defect.