remix-auth-oauth2

Workflow auditdanger

All five workflows were analyzed with no untrusted checkouts or script-injection paths, but high-confidence template-injection and bot-condition findings are present. The audit also reports trusted publishing and wide workflow permissions; low-confidence cache findings are hygiene concerns rather than decisive evidence.

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer represents a genuine bus-factor limitation rather than normal organizational publishing hygiene.

Release historycaution

The package has 29 releases over roughly 4 years, but has made no registry release in the last 12 months despite a median interval of about 46 days. That gap raises maintenance risk for a library dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Recent pushes and merged pull requests provide some counterevidence, but the recent commit gap still weakens confidence in day-to-day maintenance.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented.