Package Health

zefy/laravel-sso

The matching repository, MIT license, and focused README improve transparency. No security policy or scanning is present, leaving little evidence of ongoing security maintenance.

Latest 1.0.6PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The latest release was published in March 2018, and there have been no releases in roughly eight years. That long gap is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, with the last push in July 2021. This provides little evidence that defects or compatibility issues are being addressed.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 9 issues and 3 pull requests remain open. The lack of recent resolution activity reinforces the maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning practice modestly lowers confidence in ongoing maintenance.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported or handled. This is a meaningful gap for an SSO integration, though it is not evidence of maliciousness.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Martynas Žaliaduonis

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^6.3
laravel/framework
Version ^5.5
zefy/php-simple-sso
Version ^1.0

Weekly Downloads

Info

Last Published
8 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform