sparkouttech/user-auth

The package includes tests, release notes, documentation, and a clear MIT license. Organization backing and repository alignment are reassuring, but the lack of security policy and scanning leaves maintenance practices less transparent.

Latest v1.0.0

Packagist

52%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases, all clustered within about two days, and none in the last 12 months; the latest release is from June 2021. This strongly reduces confidence that compatibility or defects will be addressed.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the project having been inactive for years. No provided signal compensates for this maintenance gap.

Repo popularity

The repository has seven forks but no stars and only two watchers. This is limited supporting evidence for adoption and does not offset the stronger inactivity signals.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. For a package handling registration and password flows, the missing scanning practice lowers confidence in ongoing maintenance.

Security policy

The linked repository has no security policy, which makes responsible vulnerability reporting less clear for an authentication package. This is a meaningful transparency gap even though it does not establish a security defect.