Package Health/socialiteproviders/procore

socialiteproviders/procore

The repository has no security policy or automated security scanning, although the package is small and its files match the source repository. Its README and release notes provide useful integration guidance.

Latest 4.1.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package borrows the identity of the much more established socialiteproviders/manager, with 2,884,443 monthly downloads versus 246 and borrows_lookalike_identity=true. Although artifact overlap is zero, consumers may have intended to select socialiteproviders/manager instead.

Release history

The latest registry release was published more than five years ago, with no releases in the last 12 months and only three releases overall. The repository was pushed more recently, but that does not demonstrate a current release cadence.

Repo commit activity

There were no commits and no active maintainers in the last three months, reinforcing the concern that release maintenance has slowed despite the repository not being archived.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The build setup supports reproducibility, while the missing scanning reduces assurance.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less severe for this small OAuth provider than for security-sensitive infrastructure.