The package is clearly licensed, has release notes, and uses no install-time scripts. Use flarum/auth-twitter instead of this abandoned release.
12%
Total Score
50
42
83
Packagist marks the entire package as abandoned and names flarum/auth-twitter as its replacement. This directly indicates that new dependencies should move to the replacement package.
The latest release was in May 2020, with no releases in the last 12 months and no subsequent release activity for more than six years. This strongly indicates the package is no longer maintained.
The repository recorded zero commits and zero active maintainers in the last three months. Together with the archived status, this confirms that maintenance has stopped.
The linked repository is archived, and its last push was in July 2020. An archived source repository is a severe abandonment risk for a package intended as a dependency.
The assessed release is still a beta version, and all recent releases were prereleases. That adds maturity risk, although the package's much older abandoned status is the more serious concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
flarum/core Version ^0.1.0-beta.13 | — | — |
league/oauth1-client Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.