mervick/socialauther
Clear GPL-3.0+ licensing, a detailed README, and no install-time scripts make the package transparent to inspect. Its age leaves compatibility and maintenance questions unresolved for a security-sensitive library.
38%
Total Score
50
100
72
83
Health Score Breakdown
The package has had only one release, published nearly 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a library handling authentication.
There were zero commits and zero active maintainers in the last three months. Combined with the old last push, this indicates that maintenance has effectively stopped.
The repository has 3 stars, 0 forks, and 3 watchers. This is limited supporting evidence and increases uncertainty about community support, but popularity alone is not decisive.
The repository uses Composer, but no security-scanning tools are configured. The missing scanner is a hygiene concern for an authentication library, not proof that the release is unsafe.
The linked repository is not archived, which is a compensating sign. However, its last push was nearly 11 years ago, so the non-archived status does not demonstrate active maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Vasiliy Shvakin |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 orbisnull/orbistools Version dev-master | — | — |
orbisnull/twitterauth Version dev-master | — | — |
Weekly Downloads
Info
- Last Published
- 12 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.