socialiteproviders/duo

It has clear installation documentation, an MIT declaration, and organizational backing. The one-release history and lack of recent development leave long-term support uncertain.

Latest 1.0.0

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package is reported to borrow the identity of the much more established socialiteproviders/manager, with 3 monthly downloads versus 3,148,420 and borrows_lookalike_identity set to true. This is strong evidence that consumers may have intended to install the lookalike package.

Release history

This package is 193 days old and has only one release, so its maintenance and release cadence are not yet established.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, while its last push was at the initial release. This provides no evidence of continuing development after publication.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are present. For this small provider, the missing scanning is a modest transparency gap rather than a severe risk.

Security policy

The repository has no security policy. That reduces the clarity of vulnerability reporting for an authentication provider, although it does not by itself show a security defect.