socialiteproviders/box

The repository has no tests or security policy, and commit activity is currently absent. The stable MIT-licensed package has clear documentation, no install scripts, and organization backing, but its published release is several years old.

Latest 4.1.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in December 2020, with no releases in the last 12 months. This materially lowers confidence that the published version remains maintained, despite the package's long history and 12 releases.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. This indicates little recent development activity and leaves the old published release's compatibility uncertain.

Repo tooling

The repository uses Composer, but no security scanning tools were detected. The missing scanning is a modest maintenance and assurance gap rather than evidence of an unsafe release.

Security policy

The repository has no security policy. That weakens vulnerability-reporting transparency, though the package's small scope and clear repository identity partly limit the concern.

Workflow audit

No GitHub Actions workflows were found, so there are no workflow findings to weigh. This also means the audit provides no evidence of automated build or release safeguards.