The repository has no security policy, no security scanning, and documentation still describes version 3 and Laravel 5/6. MIT licensing, organization backing, and a linked repository provide useful transparency, but they do not offset the maintenance concern.
43%
Total Score
50
75
75
The package has had no release in more than five years, with only three releases overall and a median interval of about 681 days. This is strong evidence of stalled maintenance for a dependency receiving ongoing updates.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided activity signal compensates for this lack of current maintenance.
Composer build tooling is present, but no security scanning tools are configured. The missing scanning is a hygiene gap, though it is not by itself evidence that the release is unsafe.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency and maintenance concern for an authentication integration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vatsim/sso Version 3.* | — | — |
illuminate/http Version 8.* | — | — |
illuminate/support Version 8.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.