The repository has only 2 stars and no commits or active maintainers in the last three months, while the package has had no registry release in nearly four years. Its small, clearly matching source tree and MIT declaration help, but do not offset the identity concern.
42%
Total Score
50
100
78
75
The package is flagged as borrowing the identity of socialiteproviders/manager, which has far more downloads and stable releases; this suggests consumers may have intended to use the established package instead. The zero artifact overlap and README identification gap do not remove the supplied identity signal.
The latest registry release was on November 28, 2022, with no releases in the last 12 months. That is a substantial maintenance and compatibility concern despite the package having a stable release history earlier on.
The repository recorded zero commits and zero active maintainers in the last three months. This provides direct evidence of currently absent development activity, although the repository was pushed recently according to its archive signal.
The source repository has only 2 stars, 0 forks, and 0 watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of a broad user or contributor base.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
socialiteproviders/manager Version ~4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.