The package includes tests, a clear README, and a matching source repository. Its MIT licensing and modest dependency set reduce adoption friction, while workflow pinning remains weak.
65%
Total Score
75
100
88
67
This is the only release in 349 days, which provides little evidence of an established maintenance cadence and lowers confidence in ongoing support.
There were zero commits and zero active maintainers in the past three months. The repository is not archived, but this recent inactivity still raises maintenance risk.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
The repository has no security policy, so there is no stated process for reporting or handling vulnerabilities in an authentication plugin.
The single workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all 10 action references are unpinned and the workflow grants top-level write access, creating avoidable hygiene risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
composer/installers Version * | — | — |
pieceofcake2/cakephp Version ^2.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.