It includes a substantial test suite and avoids install-time scripts. The license records disagree, and the repository has no security policy or automated security scanning.
35%
Total Score
100
57
83
The latest release was over six years ago, with no releases in the last 12 months; this strongly raises abandonment risk despite seven total releases.
The manifest declares MIT, while the artifact license file is detected as BSD-3-Clause. A license exists, but the disagreement creates avoidable legal ambiguity.
The package contains tests, which supports maturity, but it has no README for consumers of this library. No changelog is not a concern for the published artifact.
The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of external adoption or review.
Composer build tooling is present, but no security scanning tools were detected. For an authentication library, that leaves a meaningful transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.30 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.