socialiteproviders/exment

Name lookalikedanger

The package borrows the identity of the far more established socialiteproviders/manager, with 2,781,232 monthly downloads versus none reported for this package. That strongly suggests consumers could mistake it for the lookalike package, despite zero artifact overlap.

Release historycaution

This package has only one release, published about four years ago, with no releases in the last 12 months. That provides little evidence of an actively maintained release line.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The organization-owned repository is not archived, but current maintenance activity is still absent.

Repo toolingcaution

Composer is used for the build, which is appropriate, but no security-scanning tooling is reported. That weakens transparency around dependency and code checks.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a hygiene gap rather than evidence that the package is unsafe.