socialiteproviders/linkedin

Name lookalikecaution

The package name resembles the much more downloaded SocialiteProviders manager package, and the detector marked borrowed identity, but artifact overlap is zero and the repository clearly matches this package. This warrants caution about naming confusion, not a supply-chain verdict.

Release historycaution

The package has a long history and 23 releases, but its latest registry release was nearly two years ago and it had no releases in the last 12 months. This is a meaningful maintenance concern despite its previously regular release interval.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the stale registry release history, this raises abandonment and compatibility risk.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected. For a small PHP provider this is a hygiene gap rather than evidence that the release is unfit.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is not by itself evidence of unsafe code or abandonment.