socialiteproviders/pocketid

Name lookalikecaution

The package borrows identity from the much more popular socialiteproviders/microsoft, with 0.5 artifact overlap and 543 versus 753,023 monthly downloads. The moderate overlap and README identification of this package as PocketID avoid the stronger copy-package conclusion, but the resemblance warrants caution.

Release historycaution

The package is about 13 months old but has only two releases, with a median interval of about 125 days and one release in the last 12 months. This indicates a young, lightly established project.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a package with only two releases, that is a meaningful maintenance warning, though it does not by itself establish abandonment.

Repo toolingcaution

The repository uses Composer for builds, which fits this PHP package, but no security-scanning tools are reported. The missing scanning is a hygiene gap rather than a severe dependency risk.

Security policycaution

No security policy is present in the linked repository. This weakens vulnerability-reporting transparency, although it does not show that the package is unsafe.