We have confirmed that VK still does not provide an official API for site integration.
We have also explored several libraries and extensions that clients suggested to review. In all cases, VK publishing is supported via insecure proxies. An insecure proxy impersonates a user to generate the access token saving/storing the user password. We are not going to implement a similar technique.