The focused theme has clear installation documentation and a small runtime dependency footprint. Organizational ownership and a matching repository add useful context, but the package has not changed since its 2018 release.
43%
Total Score
50
100
67
67
This is the sole release, published in July 2018, with no releases in the following eight years. That leaves no evidence of ongoing maintenance or compatibility work.
There were zero commits and zero active maintainers in the last three months, consistent with the package having been inactive since 2018.
The repository is not marked archived, but its last push was on July 9, 2018. The unarchived status does not compensate for the long period without updates.
The repository has 2 stars, 0 forks, and 1 watcher. Low popularity is only supporting evidence, but it provides little external evidence of active adoption or review.
Composer is used for the build, which fits this package, but no security scanning tools are present. This is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
picoauth/picoauth Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.