The package includes a README, tests, changelog, and matching MIT license. Its maintenance and security coverage are too thin for a dependable integration.
40%
Total Score
50
75
75
This package has made only one release, on June 11, 2021, with none in the last five years. That long period without a new release is a substantial abandonment concern for an integration library.
The repository recorded zero commits and zero active maintainers during the last three months. Combined with the old last push, this indicates that maintenance has effectively stopped.
Composer build tooling is present, but no security-scanning tools were detected. This is a meaningful security-hygiene gap for a package handling OAuth credentials and business-system access.
The repository is not archived, so it remains technically available. Its last push was in July 2021, which reinforces the separate evidence of prolonged inactivity.
The repository has no security policy. That leaves vulnerability-reporting and response expectations unclear, especially concerning for a connector that handles authentication tokens.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^8.0 | — | — |
league/oauth2-client Version ^2.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.