overtrue/laravel-socialite
Usable with caveats: the package is licensed, clearly backed by its matching repository, and has release notes and repository tests. However, it has had no registry release for about 2 years 6 months and no commits or active maintainers in the last 3 months, so maintenance may be slowing.
58%
Total Score
75
100
94
67
Health Score Breakdown
Composer post-install and post-update scripts run during dependency operations, adding supply-chain execution surface. No provided signal shows these scripts are harmful, so this is a caution rather than a severe risk.
The package has a long history and 11 releases, but its latest release was about 2 years 6 months ago and it had no releases in the last 12 months. That is a meaningful maintenance concern for a Laravel integration package.
The repository recorded zero commits and zero active maintainers during the last 3 months. Combined with no registry releases in the last 12 months, this suggests reduced recent maintenance capacity.
No repository security policy was found, reducing transparency about how vulnerabilities should be reported. This is a hygiene gap, not evidence that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 overtrue |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 overtrue/socialite Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.