roadiz/openid
The package includes tests, a changelog, and a matching MIT license, with no install-time scripts. The repository is current and organization-backed, though no commits were recorded in three months and no security policy is published.
79%
Total Score
83
100
94
88
Health Score Breakdown
No commits or active maintainers were recorded in the last three months. The very recent registry release history and current repository push partly offset this, but the lack of observed development activity remains a maintenance caution.
Composer is used as the build tool, but no security scanning tool was detected. The missing scanning coverage is a modest transparency and hygiene gap rather than evidence of abandonment.
The repository has no published security policy, leaving vulnerability reporting and response expectations unspecified for an authentication-related package.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-42206 roadiz/openid is vulnerable to Insufficient Verification of Data Authenticity in versions 2.7.0 - 2.7.18, 2.6.0 - 2.6.31, 2.5.0 - 2.5.45 and 0.0.0 - 2.3.43. | 0.0.0 - 2.3.432.5.0 - 2.5.452.6.0 - 2.6.31 +1 more | Medium |
Package versions
Maintainers
 Ambroise Maupate |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/cache Version >=1.0.1 | — | — |
roadiz/jwt Version 2.7.* | — | — |
lcobucci/jwt Version ^5.3 | — | — |
roadiz/models Version 2.7.* | — | — |
roadiz/random Version 2.7.* | — | — |
Weekly Downloads
Info
- Last Published
- 19 days ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.