socialiteproviders/keycloak

Name lookalikedanger

The package borrows the identity of the much more established socialiteproviders/manager, with explicit identity borrowing despite zero artifact overlap. Consumers may have intended to select that lookalike package instead, making this a severe supply-chain adoption risk.

Release historycaution

The package has 10 releases but none in the last 12 months; its latest registry release was over three years ago. This is a meaningful maintenance concern despite its earlier regular release history.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. The recent repository push helps, but does not offset the lack of observed ongoing commit activity.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a modest repository-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.