It has a clear MIT license, tests, and a repository that matches the package. The project is small, has one registry maintainer, and lacks a security policy.
45%
Total Score
25
67
50
The latest release was published in January 2021, and there have been no releases in more than five years. Eleven releases show an initial burst but no continuing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating substantial abandonment risk.
Only one account has registry publishing access. The repository is organization-owned, so the short registry list is normal publishing hygiene, but it does not offset the absence of recent activity.
The package resembles laravel/socialite and is marked as borrowing that identity, but its artifact overlap is 0 and its README does not identify it as that project. This is not strong evidence of a copied package, though the naming is mildly confusing.
The repository has only 7 stars and 1 fork, providing little evidence of a broad user or contributor base. Low popularity alone is supporting caution rather than a decisive verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^8.21 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
illuminate/support Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.