Duende.IdentityServer

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern. However, the package has had 27 releases in the last 12 months and the repository was pushed recently, so this does not establish abandonment.

Repo toolingcaution

No build tool or security-scanning tool was detected in the repository. The absence of security scanning lowers transparency somewhat, although the repository has a security policy and the workflow audit found no active audit findings.

Workflow auditcaution

The single workflow uses pull_request_target with no untrusted checkout or script-injection findings, but it grants top-level write permissions and has 1 unpinned action. These are moderate workflow hygiene concerns, not severe risks on their own.