@octokit/auth-token

Release historycaution

The package has 28 releases over more than seven years, but no registry release occurred in the last 12 months and the latest release was on May 20, 2025. This is a maintenance-cadence caution, partly offset by recent repository activity.

Repo commit activitycaution

There were no commits and no active maintainers recorded in the last three months, which weakens the maintenance picture, although recent pull-request activity and a recent push provide partial compensation.

Workflow auditcaution

All six workflows were analyzed with no audit findings, and pull_request_target workflows have no untrusted checkouts or script-injection sinks. However, all 15 action references are unpinned and two workflows grant top-level write permissions, creating moderate reproducibility and token-scope hygiene concerns.