The stable release and matching source repository provide useful transparency, while the missing security policy leaves fewer safeguards for adopters. Its small user base also limits independent evidence of long-term reliability.
55%
Total Score
50
100
83
75
The registry namespace and repository owner match, but both are associated with a single user account rather than an organization. This provides ownership consistency but limited visible backing.
The package has only 3 releases, and none in the last 12 months; its latest registry release was in May 2023. This indicates slow or stopped release maintenance for a framework dependency.
There were 0 commits and 0 active maintainers in the last three months. This is direct evidence of currently inactive development and increases abandonment risk.
There were no new or closed issues or pull requests in the last month, with one issue still open. This supports the picture of limited current project activity.
The repository has 3 stars, 0 forks, and 2 watchers. This is limited supporting evidence of adoption, though popularity alone does not determine whether a small package is healthy.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpmailer/phpmailer Version dev-master | — | — |
league/oauth2-google Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.