socialiteproviders/franceconnect

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, indicating no recent development activity and increasing abandonment risk for a package whose registry releases are already stale.

Name lookalikecaution

The package borrows identity from the much more downloaded socialiteproviders/manager package, but artifact overlap is only 0.33 and the README identifies this as a FranceConnect provider rather than a copy. This is a naming concern, not evidence that consumers most likely wanted the lookalike.

Release historycaution

The package has only four releases and has had no registry release in about three years, which materially weakens confidence in ongoing maintenance despite its multi-year history.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security-scanning tools are detected. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations unspecified. For an OAuth provider, that is a meaningful but not disqualifying transparency gap.