socialiteproviders/clerk

The package has a tiny footprint and no commits or releases in the past year, although the repository remains active enough to have been pushed recently. It has a clear README, stable version, MIT declaration, and no install scripts, but the naming concern warrants avoiding this release unless its provenance is confirmed.

Latest 5.1.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package borrows the identity of the much more established socialiteproviders/manager, with 2.9 million monthly downloads versus 7,283 and borrows_lookalike_identity marked true. Despite zero artifact overlap and a matching repository, this is a serious provenance and consumer-confusion risk.

Release history

Only two releases exist, with no releases in the last 12 months and a median interval of about 18 months, indicating a very slow release cadence.

Repo commit activity

There were no commits and no active maintainers during the last three months, which is a meaningful maintenance concern; the recent repository push provides only limited compensation.

Repo popularity

The repository has no stars and only one fork, indicating limited adoption evidence, though popularity alone is not decisive for a small provider package.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository-hygiene gap.