tkhamez/eve-sso

The project includes tests, a changelog, a clear MIT license, and a current repository. Maintenance activity is thin, with no commits in three months; the small user base, absent security scanning, and unpinned workflow actions add moderate caution.

Latest 6.1.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

Ten runtime dependencies, including several PHP extensions and authentication libraries, create a meaningful dependency surface and installation requirements, but nothing here indicates an excessive or obviously unsafe profile.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, which is the clearest maintenance concern despite the current release and recent push.

Repo issue activity

There are no open issues or pull requests and no activity in the last month. This is not inherently negative, but it provides little evidence of an active maintainer or user community.

Repo popularity

The repository has only 5 stars, 2 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these counts suggest a small external user base.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That weakens automated coverage for a library handling authentication and token verification.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^1.0 \|\| ^2.0 \|\| ^3.0	—	—
guzzlehttp/guzzle Version ^7.7\|^8.0	—	—
league/oauth2-client Version ^2.7	—	—
web-token/jwt-library Version ^3.4	—	—