salvacmp/laravel-openid-connect
Drop-in replacement for Laravel Passport to add support for OpenID Connect
38%
Total Score
unhealthy
Risky: no releases or commits for over four years, leaving this security-sensitive integration effectively unmaintained.
Health Score Breakdown
The package has 18 releases but none in the last 12 months; its latest release was over four years ago. This is strong evidence of abandonment risk for an actively evolving authentication integration.
The repository recorded 0 commits and 0 active maintainers in the last three months, consistent with the release gap and leaving no evidence of current maintenance.
The manifest declares LGPL-3.0-only, while the artifact license file is recognized as AGPL-3.0. A license is present, but the mismatch creates adoption and compliance uncertainty.
The repository uses Make and Composer, showing basic build tooling, but no security-scanning tools were detected. This is a minor weakness alongside the missing security policy.
The linked repository has no security policy, which is a meaningful transparency gap for software implementing OpenID Connect and token handling.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Arie Timmerman |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/passport Version ^10 | — | — |
salvacmp/openid-server Version ^0.2.4 | — | — |
laravel/legacy-factories Version ^1.3 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.