The small artifact is licensed, documented, and has no install-time scripts. The organization-owned repository matches the package, but recent commit activity is absent.
43%
Total Score
75
70
The package borrows the identity of the much more established socialiteproviders/manager package, with 2,830,492 monthly downloads versus none reported for this package and an explicit identity-borrowing flag. This creates a serious risk that consumers intended to select the lookalike instead.
The package has 14 releases since February 2015, but its latest registry release was in December 2020 and it had no releases in the last 12 months. That long release gap raises maintenance and compatibility concerns.
The linked repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed more recently than the registry release, the current activity evidence does not show ongoing maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
socialiteproviders/manager Version ~4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.