The package is clearly documented, tested, licensed, and actively released. Organizational ownership offsets the single active contributor, but this is a young project with no security policy and no security-scanning tooling.
70%
Total Score
75
94
83
All seven recent commits came from one contributor, creating a real continuity risk; organization ownership provides some capacity for handoff but does not demonstrate a second active contributor.
Seven commits were made in the last 3 months by one active maintainer, showing recent work but a narrowly concentrated maintenance base.
Composer build tooling is used, but no security-scanning tools were detected, leaving a modest transparency and defensive-maintenance gap.
The repository has no security policy, so there is no documented process for reporting and handling vulnerabilities in this authentication package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^3.0 | — | — |
psr/http-client Version ^1.0 | — | — |
firebase/php-jwt Version ^7.1 | — | — |
psr/http-factory Version ^1.1 | — | — |
quioteframework/auth Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.