socialiteproviders/pipedrive

Name lookalikecaution

The detector reports identity borrowing toward socialiteproviders/manager, but artifact overlap is zero and the matching repository identifies this as a distinct Pipedrive provider; the signal warrants caution without establishing a copy.

Release historycaution

The package has had no registry release in nearly six years, despite four releases overall; this materially raises maintenance and abandonment risk.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which weakens the evidence of active maintenance even though the repository is not archived.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy, reducing guidance for reporting vulnerabilities in an OAuth provider, though this alone does not make the release unfit.