OAuth 2.0 / social-login provider protocol layer for the Milpa PHP framework: Google, GitHub, GitLab, Facebook, Apple, Twitch and the Telegram Login Widget — typed contracts, curl-based providers, immutable UserInfo DTOs.
68%
Total Score
caution
A young package relies on one active contributor and uses unpinned GitHub Actions with broad workflow permissions.
The package is only 95 days old with three releases and a median interval of about 48 days, so its maintenance record is still short but recently active.
One contributor made 100% of the recent commits. Organization ownership provides some handoff potential, but no second active contributor is shown to share the current workload.
There were 10 commits in the last three months, but all were made by one active maintainer, limiting demonstrated maintenance capacity.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.
Version v0.2.1 is not a stable major release, which indicates an evolving API and somewhat higher compatibility risk for dependents.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.