socialiteproviders/sage

The package has a clear README, a stable release, and organization-backed source repository. Its very small artifact and absent recent commit activity provide little evidence of ongoing maintenance, making adoption a compatibility gamble.

Latest 4.1.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package explicitly borrows the identity of the much more established socialiteproviders/manager, with 330 monthly downloads versus 2,952,693 and no self-described fork or integration evidence. This creates a serious risk that consumers intended to select the lookalike package instead.

Release history

The latest release was published in December 2020, with no releases in the last 12 months and only three releases overall. That long release gap materially raises abandonment and compatibility risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, the observed activity does not show current maintenance capacity.

Repo tooling

Composer is used for the build, but no security scanning tooling is present. The missing scanner is a hygiene gap that modestly lowers confidence in the project's maintenance practices.

Security policy

The repository has no security policy. This is a transparency and response-process gap, though it is not by itself evidence that the package is unsafe.