strapi-plugin-sso

Maintainerscaution

Only one registry account has publish access. The repository is also owned by a user account, so this is a genuine continuity concern rather than ordinary organization publishing hygiene.

Repo bus factorcaution

All recent commits came from one contributor, with a 100% share. The repository owner is an individual rather than an organization, so there is no provided backing signal to offset this concentration.

Repo commit activitycaution

Only one commit was made in the last three months, and it came from one active maintainer. That is thin recent activity for a maintained integration plugin and raises the risk of slower fixes.

Repo toolingcaution

The repository uses npm scripts for builds, but no security scanning tools were detected. The build tooling is adequate, while the missing scanning is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy. That reduces transparency about how vulnerabilities should be reported and handled.