socialiteproviders/venmo

The repository is a four-file package with no tests, no security scanning, and no commits in the last three months. It has a clear README, MIT declaration, stable dependencies, and organization backing, but those strengths do not offset the adoption risk.

Latest 4.1.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Name lookalike

The package borrows the identity of socialiteproviders/manager, which has 3,110,962 monthly downloads and 76 stable releases versus 2,357 downloads and 5 releases here; the strong identity match makes this a serious adoption risk despite zero artifact overlap.

Release history

The package has only 5 releases and none in the last 12 months; its latest registry release was on December 1, 2020, leaving a long period without published updates.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last three months, which provides no recent evidence of ongoing maintenance capacity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository-hygiene gap.

Security policy

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package used for OAuth integration.