jeffersongoncalves/laravel-oidc
OpenID Connect for Laravel via a custom Socialite driver. Multi-tenant ready.
76%
Total Score
healthy
Recent releases and commits support the package, but a high-confidence workflow bot-check issue needs attention.
Health Score Breakdown
The package runs a post-autoload-dump install-time script, which adds execution during installation and merits some caution even though no other evidence indicates harmful behavior.
Only one registry publishing maintainer is listed, limiting publishing redundancy, but repository activity shows additional active contributors.
The repository is owned by an individual user rather than an organization, so maintenance continuity depends more directly on the named maintainer and contributors.
No repository security policy was found, reducing the project's formal transparency for reporting vulnerabilities.
All five workflows were analyzed, all 12 action references are pinned, and no untrusted checkout or script injection was found. However, a high-confidence bot-conditions finding in the Dependabot auto-merge workflow indicates a workflow authorization weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jefferson Gonçalves |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 firebase/php-jwt Version ^7.0 | — | — |
guzzlehttp/guzzle Version ^7.8|^8.2 | — | — |
laravel/socialite Version ^5.10 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.