Its MIT license, focused dependency set, and matching repository make the package straightforward to inspect and integrate. The project has had no release in over two years and no commits in the last three months, so future fixes are uncertain.
60%
Total Score
67
100
83
50
The package has only four releases and none in the last 12 months; its latest release was over two years ago. That slow and currently stopped cadence raises maintenance uncertainty for a framework integration.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest registry release, this is evidence that fixes or compatibility updates may be delayed.
Four issues and one pull request remain open, with no new or closed issues or pull requests in the last month. This is a modest sign of limited current project activity rather than evidence of abandonment by itself.
The linked repository has no security policy. For an authentication integration, that reduces transparency about how security reports and fixes are handled.
Version 0.4.0 is not marked as a prerelease, but the package remains below 1.0 after four releases. This indicates a relatively immature compatibility commitment and adds some adoption risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
neos/neos Version ^8.3 || ^9.0 || dev-main | — | — |
flownative/openidconnect-client Version ^3.0 || ^4.0 || ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.