vinelab/socialite

Its stable API, tests, clear README, and MIT license make the package straightforward to evaluate and integrate. Limited security process and almost no community activity increase the chance that future compatibility or security issues will go unattended.

Latest v2.1.2

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in nearly 10 years, with zero releases in the last 12 months. Its earlier 18-release history shows it was once active but does not offset the prolonged lapse in maintenance.

Repo issue activity

There is one open issue but no new or closed issues and no pull-request activity in the last month. This indicates little current community or maintainer engagement.

Repo popularity

The repository has zero stars and forks and only two watchers. Popularity is not required for a healthy package, but these numbers provide little supporting evidence of an active user or contributor base.

Repository archived

The repository is not archived, which preserves a path for future maintenance, but its last push was in July 2016 and therefore does not provide evidence of current activity.

Security policy

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented. This is a meaningful transparency gap for a package handling OAuth integrations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Abed Halawi

Taylor Otwell

Direct Dependencies

Dependency	Last Release	Score
illuminate/http Version ~5.0	—	—
guzzlehttp/guzzle Version ~5.0\|~6.0	—	—
illuminate/support Version ~5.0	—	—
illuminate/contracts Version ~5.0	—	—
league/oauth1-client Version ~1.0	—	—