Laravel Passport-based Identity Provider (IdP) package for local apps to use as SSO
62%
Total Score
caution
A single contributor and weak workflow pinning offset strong release activity and organization backing.
The package is only 53 days old but already has 26 releases, with a median interval of about 24 minutes. This shows active publishing, though the unusually rapid cadence adds some maturity and change-control concern.
One contributor made all 24 commits in the last three months. The repository belongs to an organization, which provides some handoff capacity, but no second active contributor is shown.
The repository recorded 24 commits in the last three months, indicating ongoing work. However, all activity comes from one active maintainer, limiting resilience.
Composer build tooling is present, but no security-scanning tooling was detected. The missing scanning is a meaningful hygiene gap for an authentication package.
The repository has no security policy. For an identity-provider package, the absence of a documented vulnerability-reporting path reduces transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/passport Version ^13.0 | — | — |
rimba/foundation Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.