socialiteproviders/whmcs

Name lookalikedanger

The package explicitly borrows the identity of socialiteproviders/manager, which has about 3.1 million monthly downloads versus 987 for this package. This is strong evidence that consumers may have intended the better-established package.

Release historydanger

The latest registry release was 2020-12-01, more than five years ago, with no releases in the last 12 months. The three-release history shows an established package but not current registry maintenance.

Maintainerscaution

Only one account has registry publish access. The organization-backed repository makes a short registry access list less concerning, but it still provides limited publishing redundancy.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it is not archived, the lack of recent development increases abandonment risk.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a package handling OAuth-related integration, though it does not by itself show a security defect.