socialiteproviders/harvest

Name lookalikedanger

The signal identifies this package as borrowing the identity of the much more established socialiteproviders/manager, with 222 monthly downloads versus 2,849,777 and borrows_lookalike_identity set to true. Consumers may have intended the lookalike package, making this a severe dependency-selection risk despite the repository matching this package.

Release historydanger

The package has four releases over roughly nine years, with no release in the last five years since June 2021. That is strong evidence of a stale registry release, although the linked repository has been pushed recently.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. The recent repository push limits the abandonment conclusion, but the absence of observed recent commit activity remains a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unspecified.