The package includes a README, tests, changelog, MIT license, and no install-time scripts. Its sole release was over three years ago, with no recent commits and no security policy.
58%
Total Score
50
83
75
Only one release exists, published over three years ago, with no releases in the last 12 months. This substantially increases abandonment and stale-dependency risk.
The repository recorded no commits and no active maintainers in the last three months. Combined with the old release history, this suggests maintenance has stopped.
The repository has 1 star, 0 forks, and 1 watcher. This provides little evidence of broad community use or external review, but popularity is supporting evidence rather than decisive on its own.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less significant than the lack of recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lcobucci/jwt Version ^4.1 || ^4.0 || ^3.4.6 | — | — |
league/oauth2-google Version ^4.0 | — | — |
league/oauth2-facebook Version ^2.2 | — | — |
nguyenanhung/framework Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.