aetah/oidc-discovery

Release historycaution

The package is young at 102 days, with three releases and a median interval of about 17 days. That shows initial publishing activity, but the short history limits evidence of long-term maintenance.

Repo bus factorcaution

One contributor made all commits in the last three months, giving the repository a complete concentration of recent activity. Organization backing partly reduces handoff risk, but the observed contributor base remains thin.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. The recent push is reassuring, but the low activity provides limited evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. For an authentication and identity library, that leaves vulnerability-reporting expectations unclear.